Date-stamp loading
Version status: Amended
Version date: 23 April 2024 - onwards
  Version 2 of 2    

Article 36 Requirements regarding dedicated data access interfaces

1. Account servicing payment service providers shall ensure that the dedicated interface referred to in Article 35(1) meets the following security and performance requirements:

(a) the dedicated interface shall establish and maintain communication sessions between the account servicing payment service provider, the account information service provider, the payment initiation service provider and any payment service user concerned throughout the authentication of the payment service user;

(b) the dedicated interface shall ensure the integrity and confidentiality of the personalised security credentials and of authentication codes transmitted by or through the payment initiation service provider or the account information service provider;

(c) the response time of the dedicated interface to account information service providers' and payment initiation service providers' access requests shall not be longer than the response time of the interface that the account servicing payment service

Comparing proposed amendment...