Directive (EU) 2015/2366 on payment services in the internal market (PSD2) requires Member States to ensure that customers have the right to use the services of regulated third party providers (TPPs) offering account information services (AIS) and payment initiation services (PIS).
To this end, the PSD2 and the regulatory technical standards on strong customer authentication (SCA) and common and secure communication (the RTS) require account servicing payment service providers (ASPSPs) to establish the access interfaces through which TPPs can access the customers’ payment accounts in a secure manner, and to ensure that these comply with the applicable requirements in the PSD2 and the RTS. In accordance with Article 31 RTS, these access interfaces can be either a dedicated interface (in general an application programming interface or API) or the modified customer interface.
