OB-SCA-005PSR 89(1)(e)Strong customer authentication

RTS on open communication standards

What the text fixes

The EBA drafts, for submission one year after entry into force, the technical standards on common and secure open standards of communication between ASPSPs, PISPs, AISPs and other providers for identification, authentication, notification and information, with supplementary provisions on dedicated interfaces.

Article: PSR 89(1)(e) · See also PSR 89(1)(f)Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.
Who is bound: EBA
Who it is for: Compliance, API
Application: From the Regulation's entry into force (Article 112).
Level 2: RTS under Article PSR 89(1)(e), draft due at T + 12 months.The mandate names this article.
Origin: PSD2, Art. 98(1)(d)

STET 1.6.3

Out of spec

This RTS will say what a specification such as STET must carry. The EBA had published nothing as of 30 September 2026.

Sources

Checked on October 4, 2026

The entry as JSON

{
  "id": "OB-SCA-005",
  "article": "PSR 89(1)(e)",
  "alsoIn": [
    "PSR 89(1)(f)"
  ],
  "articleFinal": null,
  "actors": [
    "eba"
  ],
  "roles": [
    "compliance",
    "api"
  ],
  "appliesAt": "T",
  "title": {
    "fr": "RTS sur les standards ouverts de communication",
    "en": "RTS on open communication standards",
    "es": "RTS sobre estándares abiertos de comunicación",
    "pt-br": "RTS sobre padrões abertos de comunicação"
  },
  "level1": {
    "fr": "L'EBA rédige, pour une remise un an après l'entrée en vigueur, les normes techniques sur les standards ouverts et sécurisés de communication entre ASPSP, PISP, AISP et autres prestataires pour l'identification, l'authentification, la notification et l'information, avec des dispositions complémentaires sur les interfaces dédiées.",
    "en": "The EBA drafts, for submission one year after entry into force, the technical standards on common and secure open standards of communication between ASPSPs, PISPs, AISPs and other providers for identification, authentication, notification and information, with supplementary provisions on dedicated interfaces.",
    "es": "La EBA redacta, para su entrega un año después de la entrada en vigor, las normas técnicas sobre estándares abiertos y seguros de comunicación entre ASPSP, PISP, AISP y otros proveedores para la identificación, la autenticación, la notificación y la información, con disposiciones complementarias sobre las interfaces dedicadas.",
    "pt-br": "A EBA redige, para entrega um ano após a entrada em vigor, as normas técnicas sobre padrões abertos e seguros de comunicação entre ASPSPs, PISPs, AISPs e outros prestadores para identificação, autenticação, notificação e informação, com disposições complementares sobre as interfaces dedicadas."
  },
  "level2": {
    "mandate": "PSR 89(1)(e)",
    "instrument": "rts",
    "deadline": "T+12",
    "link": "named"
  },
  "origin": [
    {
      "act": "psd2",
      "articles": "98(1)(d)"
    }
  ],
  "stet": {
    "1.6.3": {
      "status": "out-of-scope",
      "note": {
        "fr": "Ce RTS dira ce qu'une spécification comme STET devra porter. L'EBA n'avait rien publié au 30 septembre 2026.",
        "en": "This RTS will say what a specification such as STET must carry. The EBA had published nothing as of 30 September 2026.",
        "es": "Estas RTS dirán lo que debe incluir una especificación como STET. La EBA no había publicado nada a 30 de septiembre de 2026.",
        "pt-br": "Essas RTS dirão o que uma especificação como o STET deve trazer. A EBA não tinha publicado nada até 30 de setembro de 2026."
      },
      "pages": []
    }
  },
  "verification": null,
  "sources": [
    {
      "document": "8221/26",
      "page": 368
    },
    {
      "document": "8221/26",
      "page": 371
    }
  ],
  "verifiedAt": "2026-10-04"
}

All obligations Markdown version