(1) This regulation applies only in relation to a payment account which is accessible online.

(2) Where a payment service user uses an account information service, the payment service user's account servicing payment service provider must -

(a) communicate securely with the account information service provider in accordance with the technical standards made under regulation 106A;

(b) treat a data request from the account information service provider in the same way as a data request received directly from the payer, unless the account servicing payment service provider has objective reasons for treating the request differently;

(c) not require the account information service provider to enter into a contract before complying with the preceding sub-paragraphs.

(3) An account information service provider must -

(a) not provide account information services without the payment service user's explicit consent;