EBA欧洲银行-Call-for-expression-of-interests_3页_632kb

EBA Working Group on APIs under PSD2 (WG-API) Summary

Background

In March 2018, the European Banking Authority (EBA) published its Regulatory Technical Standards (RTS) on Strong Customer Authentication (SCA) and Common and Secure Communication (CSC), which became effective as Commission Delegated Regulation (EU) 2018/389. This regulation requires account servicing payment service providers (ASPSPs) to provide at least one interface for third-party payment service providers (TPPs) to access payment account information and initiate payments.

TPPs include:

• Account information service providers (AISPs)
• Payment initiation service providers (PISPs)
• Card-based payment instrument issuers

To comply with the RTS, ASPSPs must also ensure their customer-facing interface can serve as a fallback mechanism if the dedicated interface fails to meet service level targets. However, an exemption from implementing the fallback is possible if ASPSPs meet the conditions outlined in Article 33(6) of the RTS and the EBA Guidelines on the exemption (EBA/GL/2018/07).

Aims

The WG-API is established to:

• Facilitate industry preparedness for the RTS and its guidelines.
• Support the development of high-performing and customer-focused APIs under PSD2.
• Identify issues and challenges that market participants may face during the testing and use of ASPSPs' production interfaces in the period leading up to September 2019.
• Propose collaborative solutions to address these issues, which the EBA and national authorities will consider.
• Promote a harmonised approach across all 28 EU Member States in the supervision of API-related requirements.

The outcomes of the group's discussions will be published on the EBA's website, though the views will not be attributed to individual participants.

Composition

The WG-API will include:

• EBA staff
• National authorities
• Other EU institutions
• External stakeholders, including:
  • A. Account servicing payment service providers (banks and non-banks)
  • B. Account information service providers (AISPs)
  • C. Payment initiation service providers (PISPs)
  • D. Card-based payment instrument issuers
  • E. API initiatives
  • F. Others, such as:
    • Payment service users (consumers or businesses)
    • Technical service providers
    • Standardisation bodies

Selection Criteria

To be considered for participation, individuals must meet the following criteria:

• Experience in API design, implementation, or use, or in their standardisation.
• Experience, ability, and willingness to contribute to discussions that support the objectives of PSD2 and lead to better outcomes for all market participants, not just specific groups.
• Knowledge of PSD2 and the EBA's regulatory requirements, including:
  • The EBA RTS on SCA&CSC
  • The EBA Guidelines on the exemption from contingency measures
  • The EBA Opinion on the implementation of the RTS
  • The EBA Opinion on the use of eIDAS certificates
  • Relevant questions and answers from the EBA's Q&A tool

Participation Process

• Expressions of interest must be submitted to the EBA by 14 January 2019, cob.
• The EBA will chair the group and select participants based on the above criteria.
• The group may not be able to accommodate all applicants due to the need for a balanced composition, considering geography and type of market participant.
• Notification of acceptance will be sent by 4 February 2019.
• Participants are expected to cover their travel costs for attending meetings.
• The first meeting is planned for the third week of February 2019 at the EBA's premises in London.
• Additional meetings may be held in the first half of 2019, with further details to be announced later.

Conclusion

The WG-API aims to foster collaboration among stakeholders to address challenges related to the implementation of APIs under PSD2. By facilitating discussions and proposing solutions, the group will help ensure a smooth transition to the new regulatory requirements and promote a consistent and effective approach across the EU.