(1) Where the liability of a payment service provider under Regulation 97, 112 or 113 is attributable to another payment service provider or to an intermediary, that payment service provider or intermediary, as the case may be, shall compensate the first-mentioned payment service provider for any losses incurred or sums paid under Regulation 97, 112 or 113, including where any of the payment service providers concerned fail to use strong customer authentication.

(2) Financial compensation in addition to that provided for under paragraph (1) may be determined in accordance with an agreement between the payment service providers concerned or the payment service provider and intermediary concerned, as the case may be, and the law applicable to that agreement.