Commission adopts amended RTS on SCA and CSC under PSD2

Article summary

The European Commission has adopted a delegated regulation supplementing the revised EU Payment Services Directive (EU) 2015/2366 (EU PSD2) with regard to amending regulatory technical standards (RTS) laid down in Delegated Regulation (EU) 2018/389 on strong customer authentication (SCA) and secure open standards of communication (CSC). The changes introduce a new mandatory exemption to SCA that will require account providers not to apply SCA when customers use an account information service provider (AISP) to access their payment account information, provided certain conditions are met.