Search
EBA consults on the revision of the Guidelines on major incident reporting under PSD2
The European Banking Authority (EBA) launched today a public consultation to propose revising the Guidelines on major incident reporting under the Payment Service Directive (PSD2). The proposal aims at optimising and simplifying the reporting process, capturing additional relevant security incidents, reducing the number of operational incidents that will be reported, and improving the meaningfulness of the incident reports received. The revision of the Guidelines also intends to decrease the reporting burden on payment service providers (PSPs). The consultation runs until 14 December 2020.
Consultation paper on the draft revised GL on major incident reporting under PSD2
EBA Opinion on obstacles under Art. 32(3) RTS on SCA&CSC.pdf
Opinion on obstacles under Article 32(3) of the RTS on SCA and CSC
EBA publishes Opinion on obstacles to the provision of third party provider services under the Payment Services Directive
The European Banking Authority (EBA) published today an Opinion on obstacles to the provision of third party provider services (TPPs) under the Regulatory Technical Standards (RTS) on strong customer authentication (SCA) and common and secure communication (CSC). The Opinion aims to support the objectives of the revised Payment Services Directive (PSD2) of enabling customers to use new and innovative payment services offered by TPPs by addressing a number of issues regarding the interfaces provided by account servicing payment service providers (ASPSPs) to TPPs.
Transfer of and certain crypto-assets Regulation (WTR2)
REGULATION (EU) 2023/1113 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCILEBA GL 2017 17-CT - (updated) - GLs on security measures for operational and security risks of payment services.pdf
Compliance table
Opinion on the deadline for the migration to SCA.pdf
Opinion on the deadline for the migration to SCA for e-commerce card-based payment transactions
Article 3
ExclusionsArticle 4
DefinitionsArticle 2
ScopeArticle 98
Regulatory technical standards on authentication and communicationArticle 97
AuthenticationEBA publishes an Opinion on the use of eIDAS certificates under PSD2
The European Banking Authority (EBA) published today an Opinion on the use of eIDAS certificates under the Regulatory Technical Standards (RTS) on Strong Customer Authentication and Common and Secure Communication (SCA&CSC). In the Opinion, the EBA clarifies specific aspects on the use of qualified certificates for electronic seals (QSealCs) and qualified certificates for website authentication (QWACs) for the purpose of identification of payment service providers (PSPs) under the RTS, the content of these certificates, and the process for their revocation.