- Question ID
-
2025_7673
- Legal act
- Directive 2015/2366/EU (PSD2)
- Topic
- Other topics
- Article
-
n.a.
- Paragraph
-
n.a.
- Subparagraph
-
n.a.
- COM Delegated or Implementing Acts/RTS/ITS/GLs/Recommendations
- Regulation (EU) 2018/389 - RTS on strong customer authentication and secure communication
- Article/Paragraph
-
32(1) and 32(2)
- Type of submitter
-
Other
- Subject matter
-
Supervisory obligations of NCAs under Article 32(2) of Commission Delegated Regulation (EU) 2018/389
- Question
-
Article 32(2) of Commission Delegated Regulation (EU) 2018/389 states that competent authorities shall monitor the interfaces, the indicators and subject them to stress testing.
We are seeking clarification on the interpretation of this provision. In particular, we would appreciate guidance on the EBA’s expectations regarding the scope and nature of NCAs’ monitoring of these interfaces, including the assessment of their operational performance and reliability, as well as the conduct of stress tests, to ensure that the requirements of Article 32(1),that dedicated interfaces shall maintain the same level of availability and performance as the ASPSP’s own online channels, are effectively met.
- Background on the question
-
Commission Delegated Regulation (EU) 2018/389 establishes specific requirements for the availability, performance and support of dedicated interfaces provided by ASPSPs to PISPs and AISPs. Article 30 sets out the general obligations for access interfaces, while Article 32(1) requires that dedicated interfaces provide, at all times, the same level of availability and performance, including support, as the interfaces made available by the ASPSP to its payment service users for direct access to their payment accounts online.
Article 32(2) further provides that ASPSPs shall define transparent key performance indicators and service level targets for dedicated interfaces, and that competent authorities shall monitor these interfaces, indicators and objectives, and subject them to stress testing. This provision indicates that competent authorities are expected to oversee the operational performance and reliability of payment initiation service interfaces, in line with the objectives of PSD2 and the RTS.
In practice, supervisory approaches may differ, and in some cases the monitoring of dedicated interfaces may rely primarily on periodic assessments or on issues identified through specific incidents or complaints.
This highlights the importance of clarifying the scope and nature of the monitoring obligation under Article 32(2), in order to ensure that the performance requirements set out in Article 32(1) are effectively met.
In addition, the EBA has provided further guidance in its Opinion on obstacles underArticle 32(3) RTS on SCA&CSC, clarifying that competent authorities are expected to take these clarifications into account when supervising ASPSPs’ compliance with PSD2 and the RTS. In particular, EBA advises competent authorities to pay close attention to the customer journey in redirection-based approaches and to take appropriate actions to ensure that any obstacles identified are removed by ASPSPs without undue delay.
- Submission date
- Rejected publishing date
-
- Rationale for rejection
-
This question has been rejected because EBA guidance or clarification is not needed. The question has already been addressed in Guidelines 2 and 4 of the EBA Guidelines on the exemption from the contingency mechanism (EBA/GL/2018/07).
- Status
-
Rejected question