OB-AIS-004PSR 41(2)Account information

AIS access with or without the user

What the text fixes

The ASPSP lets the AISP access the designated accounts whether or not the user is actively requesting the information, and the text does not carry over the 2018 RTS limit of four accesses per 24 hours.

Article: PSR 41(2)Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.
Who is bound: ASPSP
Who it is for: API, Operations, Product
Application: 21 months after entry into force, the general application date (Article 112).
Level 2: No EBA mandate covers this obligation.
Origin: RTS 2018/389, Art. 36(5)

STET 1.6.3

To review

The Framework has an ACCESS_EXCEEDED code (429) for exceeding the daily number of accesses, and PSU-* headers as proof that the user is connected. A daily quota built on the four-access rule no longer has any footing in the text.

Handbook pages

3. Prerequisites and technical details

Sources

Council doc. 8221/26, page 255

Checked on October 4, 2026

The entry as JSON

{
  "id": "OB-AIS-004",
  "article": "PSR 41(2)",
  "alsoIn": [],
  "articleFinal": null,
  "actors": [
    "aspsp"
  ],
  "roles": [
    "api",
    "infra",
    "product"
  ],
  "appliesAt": "T+21",
  "title": {
    "fr": "Accès AIS avec ou sans l'utilisateur",
    "en": "AIS access with or without the user",
    "es": "Acceso AIS con o sin el usuario",
    "pt-br": "Acesso AIS com ou sem o usuário"
  },
  "level1": {
    "fr": "L'ASPSP laisse l'AISP accéder aux comptes désignés que l'utilisateur soit en train de demander l'information ou non, et le texte ne reprend pas la limite de quatre accès par 24 heures des RTS de 2018.",
    "en": "The ASPSP lets the AISP access the designated accounts whether or not the user is actively requesting the information, and the text does not carry over the 2018 RTS limit of four accesses per 24 hours.",
    "es": "El ASPSP deja que el AISP acceda a las cuentas designadas tanto si el usuario está pidiendo la información como si no, y el texto no recoge el límite de cuatro accesos cada 24 horas de las RTS de 2018.",
    "pt-br": "O ASPSP deixa o AISP acessar as contas designadas esteja o usuário pedindo a informação ou não, e o texto não mantém o limite de quatro acessos a cada 24 horas das RTS de 2018."
  },
  "level2": null,
  "origin": [
    {
      "act": "rts-2018-389",
      "articles": "36(5)"
    }
  ],
  "stet": {
    "1.6.3": {
      "status": "review",
      "note": {
        "fr": "Le Framework prévoit le code `ACCESS_EXCEEDED` (429) quand le nombre d'accès par jour est dépassé, et les en-têtes `PSU-*` comme preuve que l'utilisateur est connecté. Un quota quotidien bâti sur la règle des quatre accès n'a plus d'appui dans le texte.",
        "en": "The Framework has an `ACCESS_EXCEEDED` code (429) for exceeding the daily number of accesses, and `PSU-*` headers as proof that the user is connected. A daily quota built on the four-access rule no longer has any footing in the text.",
        "es": "El Framework prevé el código `ACCESS_EXCEEDED` (429) cuando se supera el número de accesos diarios, y las cabeceras `PSU-*` como prueba de que el usuario está conectado. Una cuota diaria construida sobre la regla de los cuatro accesos ya no tiene apoyo en el texto.",
        "pt-br": "O Framework prevê o código `ACCESS_EXCEEDED` (429) quando o número de acessos diários é excedido, e os cabeçalhos `PSU-*` como prova de que o usuário está conectado. Uma cota diária baseada na regra dos quatro acessos não tem mais apoio no texto."
      },
      "pages": [
        "framework/3-prerequisites-and-technical-details"
      ]
    }
  },
  "verification": null,
  "sources": [
    {
      "document": "8221/26",
      "page": 255
    }
  ],
  "verifiedAt": "2026-10-04"
}

All obligations Markdown version