(1) A payment service user has the right to make use of services enabling access to account information referred to in paragraph 8 of the Schedule.
(2) The right referred to in paragraph (1) shall not apply where the payment account is not accessible online.
(3) An account information service provider shall -
(a) provide services only where a payment service user has given his or her explicit consent thereto,
(b) ensure that the personalised security credentials of a payment service user -
(i) are not, with the exception of the user and the issuer of the personalised security credentials, accessible to other parties, and
(ii) are transmitted by the account information service provider by safe and efficient means,
(c) for each communication session, identify itself to the account servicing payment service provider of the payment service user concerned and securely communicate with the account servicing payment service provider and the payment service user, in accordance with the regulat
…