European Banking Authority's opinion on strong customer authentication

The European Banking Authority adopted an opinion on the elements of strong customer authentication under the second payment services directive (PSD2). PSD2 granted the European Banking Authority a number of mandates to develop draft regulatory technical standards (RTS), including the RTS on strong customer authentication and common and secure communication, which the Commission adopted on 27 November 2017 (Commission Delegated Regulation (EU) 2018/389).

The Commission welcomes EBA’s opinion which clarifies how authentication elements comply with the new EU rules on strong customer authentication (SCA). The opinion will assist national competent authorities (NCAs) in preparing their markets, in particular in the cards business, to apply PSD2 and the RTS on strong customer authentication and common and secure communication as of 14 September 2019.

• Statement by the Commission
• Press release by the European Banking Authority
• EBA's opinion on the elements of strong customer authentication under PSD2