OB-OBS-003PSR 44(1)(c)Prohibited obstacles

Checking the consent given to the TPP

What the text fixes

The ASPSP may neither require checks of the consent the user gave the TPP nor verify that consent itself.

Article: PSR 44(1)(c) · See also PSR 49(4)Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.
Who is bound: ASPSP
Who it is for: API, Product, Compliance
Application: 21 months after entry into force, the general application date (Article 112).
Level 2: No EBA mandate covers this obligation.
Origin: RTS 2018/389, Art. 32(3); EBA Opinion of 4 June 2020 on obstacles

STET 1.6.3

To review

PUT /consents passes the consent's scope to the bank, which Article 43(3b) also requires. The bank may use it to limit access, not to verify the consent.

Handbook pages

PUT /consents

Sources

Checked on October 4, 2026

The entry as JSON

{
  "id": "OB-OBS-003",
  "article": "PSR 44(1)(c)",
  "alsoIn": [
    "PSR 49(4)"
  ],
  "articleFinal": null,
  "actors": [
    "aspsp"
  ],
  "roles": [
    "api",
    "product",
    "compliance"
  ],
  "appliesAt": "T+21",
  "title": {
    "fr": "Contrôler le consentement donné au TPP",
    "en": "Checking the consent given to the TPP",
    "es": "Comprobar el consentimiento dado al TPP",
    "pt-br": "Verificar o consentimento dado ao TPP"
  },
  "level1": {
    "fr": "L'ASPSP ne peut ni exiger de contrôle du consentement que l'utilisateur a donné au TPP, ni vérifier lui-même ce consentement.",
    "en": "The ASPSP may neither require checks of the consent the user gave the TPP nor verify that consent itself.",
    "es": "El ASPSP no puede exigir comprobaciones del consentimiento que el usuario dio al TPP ni verificar él mismo ese consentimiento.",
    "pt-br": "O ASPSP não pode exigir verificações do consentimento que o usuário deu ao TPP nem verificar ele mesmo esse consentimento."
  },
  "level2": null,
  "origin": [
    {
      "act": "rts-2018-389",
      "articles": "32(3)"
    },
    {
      "act": "eba-opinion-2020"
    }
  ],
  "stet": {
    "1.6.3": {
      "status": "review",
      "note": {
        "fr": "`PUT /consents` transmet à la banque le périmètre du consentement, ce que l'article 43(3b) demande aussi. La banque peut s'en servir pour limiter l'accès, pas pour vérifier le consentement.",
        "en": "`PUT /consents` passes the consent's scope to the bank, which Article 43(3b) also requires. The bank may use it to limit access, not to verify the consent.",
        "es": "`PUT /consents` transmite al banco el alcance del consentimiento, algo que el artículo 43(3b) también exige. El banco puede usarlo para limitar el acceso, no para verificar el consentimiento.",
        "pt-br": "`PUT /consents` envia ao banco o escopo do consentimento, o que o artigo 43(3b) também exige. O banco pode usá-lo para limitar o acesso, não para verificar o consentimento."
      },
      "pages": [
        "endpoints/aisp/consents-put"
      ]
    }
  },
  "verification": null,
  "sources": [
    {
      "document": "8221/26",
      "page": 261
    },
    {
      "document": "8221/26",
      "page": 276
    }
  ],
  "verifiedAt": "2026-10-04"
}

All obligations Markdown version