# OB-IF-016 — TPP duties on the customer interface

> When only the Article 39 interface is available, the TPP identifies itself, sends the dashboard information, relies on the ASPSP's authentication, processes data only for the service requested and logs the data accessed, with logs deleted after three years.

- Article: PSR 45(2)
- Who is bound: AISP, PISP
- Who it is for: Compliance, Operations
- Application: 21 months after entry into force, the general application date (Article 112).
- Level 2: No EBA mandate covers this obligation.
- Origin: RTS 2018/389, Art. 33(5)

Provisional numbering of the April 2026 compromise (Council doc. 8221/26). The final numbering will be added when the Official Journal publishes the text, without changing the id.

## STET 1.6.3: Out of spec

This case assumes there is no dedicated API.


## Sources

- [Council doc. 8221/26, page 265](https://data.consilium.europa.eu/doc/document/ST-8221-2026-INIT/en/pdf#page=265)
- [Council doc. 8221/26, page 266](https://data.consilium.europa.eu/doc/document/ST-8221-2026-INIT/en/pdf#page=266)

Checked on 2026-10-04. https://openfinanceguide.com/en/dsp3/obligations/ob-if-016