OB-AIS-007PSR 47(1)(d)Account information

The AISP accesses designated accounts only

What the text fixes

The AISP accesses only information from designated accounts and their transactions, with mechanisms that prevent any other access, in line with the user's consent.

Article: PSR 47(1)(d) · See also PSR 47(1)(e)Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.
Who is bound: AISP
Who it is for: API, Audit and pentest
Application: 21 months after entry into force, the general application date (Article 112).
Level 2: No EBA mandate covers this obligation.
Origin: PSD2, Art. 67(2)(d); RTS 2018/389, Art. 36(3)

STET 1.6.3

Covered

PUT /consents lists, for each data type, the accounts the user designated, and the bank uses it to limit access.

Handbook pages

Sources

Council doc. 8221/26, page 269

Checked on October 4, 2026

The entry as JSON

{
  "id": "OB-AIS-007",
  "article": "PSR 47(1)(d)",
  "alsoIn": [
    "PSR 47(1)(e)"
  ],
  "articleFinal": null,
  "actors": [
    "aisp"
  ],
  "roles": [
    "api",
    "pentest"
  ],
  "appliesAt": "T+21",
  "title": {
    "fr": "L'AISP n'accède qu'aux comptes désignés",
    "en": "The AISP accesses designated accounts only",
    "es": "El AISP solo accede a las cuentas designadas",
    "pt-br": "O AISP só acessa as contas designadas"
  },
  "level1": {
    "fr": "L'AISP n'accède qu'aux informations des comptes désignés et de leurs opérations, avec des mécanismes qui empêchent tout autre accès, conformément au consentement de l'utilisateur.",
    "en": "The AISP accesses only information from designated accounts and their transactions, with mechanisms that prevent any other access, in line with the user's consent.",
    "es": "El AISP solo accede a la información de las cuentas designadas y de sus operaciones, con mecanismos que impiden cualquier otro acceso, conforme al consentimiento del usuario.",
    "pt-br": "O AISP só acessa informações das contas designadas e de suas transações, com mecanismos que impedem qualquer outro acesso, de acordo com o consentimento do usuário."
  },
  "level2": null,
  "origin": [
    {
      "act": "psd2",
      "articles": "67(2)(d)"
    },
    {
      "act": "rts-2018-389",
      "articles": "36(3)"
    }
  ],
  "stet": {
    "1.6.3": {
      "status": "present",
      "note": {
        "fr": "`PUT /consents` liste, par type de donnée, les comptes que l'utilisateur a désignés, et la banque s'en sert pour limiter l'accès.",
        "en": "`PUT /consents` lists, for each data type, the accounts the user designated, and the bank uses it to limit access.",
        "es": "`PUT /consents` enumera, por tipo de dato, las cuentas que el usuario ha designado, y el banco lo usa para limitar el acceso.",
        "pt-br": "`PUT /consents` lista, por tipo de dado, as contas que o usuário designou, e o banco o usa para limitar o acesso."
      },
      "pages": [
        "endpoints/aisp/consents-put",
        "flows/6-2-consent-forwarding"
      ]
    }
  },
  "verification": null,
  "sources": [
    {
      "document": "8221/26",
      "page": 269
    }
  ],
  "verifiedAt": "2026-10-04"
}

All obligations Markdown version