At the end of the Brexit transition on 31st December 2020, eIDAS certificates, used by UK third party providers (TPPs) to identify themselves to Financial Institutions (ASPSPs) under PSD2 open banking, will no longer be valid.
The FCA has amended article 34 of the UK RTS on SCA and CSC to allow UK TPPs to use an alternative digital certificate to access customer account information or initiate payments.
Do you understand these requirements and what you need to do to comply?
Our summary below sets out the steps that need to be followed, the deadlines to be met and the on-going regulatory requirements.
Actions to be completed by 31st December 2020
To ensure ASPSPs meet the deadline, the following actions must be undertaken:
- Assess any changes that need to be made to your systems so you can accept at least one alternative digital certificate
- Decide which digital certificate(s) to accept
- Implement any changes as soon as possible ahead of Implementation Period (IP) Completion Day
- Publish which types of digital certificate(s) you will accept
- Continue to accept eIDAS certificates. These will still be used by European TPPs to identify themselves
Konsentus can help you quickly and easily comply with the FCA open banking requirements by:
Additional on-going mandatory FCA regulatory requirements
Konsentus Verify offers a single API solution to achieve instant compliance. It is easy to integrate and removes the heavy operational lift, associated costs, and resources required to implement these changes at speed.
To find out more about how we can help you meet these deadlines, comply with regulation and mitigate risk, contact one of our team on: FCABrexit@konsentus.com
