Yes, we agree with the EBA’s assessments on obstacles. The Panel believes that there are considerable security advantages to consumers from redirection i.e. where a consumer using an AISP/PISP is redirected to their ASPSP’s website to enter their credentials directly. This enables them to share access to their account for the use of AISP/PISP services without having to share their login credentials with the AISP/PISP.
We are aware that there has been pressure on the EBA from some AISPs, PISPs and industry groups to declare all redirection an obstacle. We believe that this would be wholly counter to the spirit of PSD2, which is about offering consumers choice of services while improving security and standards of authentication. Consumer choice and empowerment are welcome, but this should not be at the expense of security. We strongly urge the EBA to retain Guideline 5 as it stands.