Skip to main content
European Banking Authority logo
  • Extranet
  • Log in
  • About us
    Back

    About us

    The EBA is an independent EU Authority.  We play a key role in safeguarding the integrity and robustness of the EU banking sector to support financial stability in the EU.

    Learn more
      • Mission, values and tasks
      • Organisation and governance
        • Governance structure and decision making
        • EBA within the EU institutional framework
        • Internal organisation
        • Accountability
      • Legal and policy framework
        • EBA regulation and institutional framework
        • Compliance with EBA regulatory products
      • Sustainable EBA
      • Diversity and inclusion
      • Careers
        • Meet our team
        • Vacancies
      • Budget
      • Procurement
    Close icon
  • Activities
    Back

    Activities

    To contribute to the stability and effectiveness of the European financial system, the EBA develops harmonised rules for financial institutions, promotes convergence of supervisory practices, monitors, and advises on the impact of financial innovation and the transition to sustainable finance.

    Start here
      • Single Rulebook
      • Simplification and efficiency
      • Implementing Basel III in Europe
      • Supervisory convergence
        • Supervisory convergence
        • Supervisory disclosure
        • Peer Reviews
        • Mediation
        • Breach of Union Law
        • Colleges
        • Training
      • Direct supervision and oversight
        • Markets in Crypto-assets
        • Digital operational resilience Act
        • Validation of pro forma-initial margin models
      • Information for consumers
        • National competent authorities for consumer protection
        • How to complain
        • Personal finance at the EU level
        • Warnings
        • Financial education
        • National registers and national authorities responsible for handling complaints related to credit servicers
        • Frauds and scams
      • Research Workshops
      • Ad hoc activities
        • Our response to Covid-19
        • Brexit
    Close icon
  • Risk and data analysis
    Back

    Risk and data analysis

    To ensure the orderly functioning and stability of the financial system in the European Union, we monitor and analyse risks and vulnerabilities relevant for the regulation of banks and investment firms. We also facilitate information sharing among authorities and institutions through supervisory reporting and data disclosure.

    Learn more
      • European Data Access Portal (EDAP)
      • Risk analysis
        • EU-wide stress testing
        • EU wide transparency exercise
        • Risk monitoring
        • Thematic analysis
      • Remuneration and diversity analysis
      • Pillar 3 data hub
        • Access to P3DH
      • Reporting
        • Reporting frameworks
        • Reporting Time Traveller
        • DPM data dictionary
        • Integrated reporting
        • Joint Bank Reporting Committee (JBRC)
      • Data
        • Registers and other list of institutions
        • Guides on data
        • Aggregate statistical data
        • Secondary reporting: data from Competent Authorities to the EBA
        • Data analytics tools
    Close icon
  • Publications and media
    Back

    Publications and media

    Communicating to all our audiences in the most effective way and using the most appropriate channels is crucial for us. Through our publications, announcements, and participation in external events, we are committed to reaching out to all our stakeholders to report about our policies, activities, and initiatives.

    Learn more
      • Publications
        • Guidelines
        • Regulatory Technical Standards
        • Implementing Technical Standards
        • Reports
        • Consultation papers
        • Opinions
        • Decisions
        • Staff papers
        • Annual reports
      • Press releases
      • Speeches
      • Interviews
      • Events
      • Media centre
        • Factsheets
        • Media gallery
        • Media resources
    Close icon

Breadcrumb

  1. Home
  2. Single Rulebook Q&A
  3. 2025_7673 Supervisory obligations of NCAs under Article 32(2) of Commission Delegated Regulation (EU) 2018/389
Question ID
2025_7673
Legal act
Directive 2015/2366/EU (PSD2)
Topic
Other topics
Article
n.a.
Paragraph
n.a.
Subparagraph
n.a.
COM Delegated or Implementing Acts/RTS/ITS/GLs/Recommendations
Regulation (EU) 2018/389 - RTS on strong customer authentication and secure communication
Article/Paragraph
32(1) and 32(2)
Type of submitter
Other
Subject matter
Supervisory obligations of NCAs under Article 32(2) of Commission Delegated Regulation (EU) 2018/389
Question

Article 32(2) of Commission Delegated Regulation (EU) 2018/389 states that competent authorities shall monitor the interfaces, the indicators and subject them to stress testing.

We are seeking clarification on the interpretation of this provision. In particular, we would appreciate guidance on the EBA’s expectations regarding the scope and nature of NCAs’ monitoring of these interfaces, including the assessment of their operational performance and reliability, as well as the conduct of stress tests, to ensure that the requirements of Article 32(1),that dedicated interfaces shall maintain the same level of availability and performance as the ASPSP’s own online channels, are effectively met.

Background on the question

Commission Delegated Regulation (EU) 2018/389 establishes specific requirements for the availability, performance and support of dedicated interfaces provided by ASPSPs to PISPs and AISPs. Article 30 sets out the general obligations for access interfaces, while Article 32(1) requires that dedicated interfaces provide, at all times, the same level of availability and performance, including support, as the interfaces made available by the ASPSP to its payment service users for direct access to their payment accounts online.

Article 32(2) further provides that ASPSPs shall define transparent key performance indicators and service level targets for dedicated interfaces, and that competent authorities shall monitor these interfaces, indicators and objectives, and subject them to stress testing. This provision indicates that competent authorities are expected to oversee the operational performance and reliability of payment initiation service interfaces, in line with the objectives of PSD2 and the RTS.

In practice, supervisory approaches may differ, and in some cases the monitoring of dedicated interfaces may rely primarily on periodic assessments or on issues identified through specific incidents or complaints.

This highlights the importance of clarifying the scope and nature of the monitoring obligation under Article 32(2), in order to ensure that the performance requirements set out in Article 32(1) are effectively met.

 

In addition, the EBA has provided further guidance in its Opinion on obstacles underArticle 32(3) RTS on SCA&CSC, clarifying that competent authorities are expected to take these clarifications into account when supervising ASPSPs’ compliance with PSD2 and the RTS. In particular, EBA advises competent authorities to pay close attention to the customer journey in redirection-based approaches and to take appropriate actions to ensure that any obstacles identified are removed by ASPSPs without undue delay.

Submission date
23/12/2025
Rejected publishing date
11/05/2026
Rationale for rejection

This question has been rejected because EBA guidance or clarification is not needed. The question has already been addressed in Guidelines 2 and 4 of the EBA Guidelines on the exemption from the contingency mechanism (EBA/GL/2018/07).

Status
Rejected question

Footer

EUROPEAN BANKING AUTHORITY

Our mission is to contribute to the stability and effectiveness of the European financial system through simple, consistent, transparent, fair regulation and supervision that benefits all EU citizens.


UE logoAn agency of the EU

EU Agencies Network logoEU Agencies Network

EMAS logoSustainable EBA

Contact us

  • Contacts
  • Ask a general question
  • Send a press query
  • Ask a regulatory question
  • Request access to documents
  • File a complaint
  • Whistleblower reports

Stay up to date with our work

  • Subscribe to our email alerts
  • News & press RSS feed

Follow us on Social media

  • Bluesky
  • LinkedIn
  • X
  • YouTube

Find out about us

  • The EBA at a glance
  • Privacy policy
  • Legal notice
  • Cookies policy
  • Frauds and scams

Explore related sites

  • EIOPA
  • ESMA
  • ESRB
  • CEBS archive