EBA

A recent statement by the EBA that the setting up of a SEPA direct debit mandate provided through a remote channel is subject to strong customer authentication has caused concerns in the payment services market. BaFin has now clarified that it does not consider strong customer authentication to apply where payment service providers are not involved in the process of issuing the mandates. What are the implications of these statements?

Eine am 22. Februar 2019 von der EBA veröffentlichte Stellungnahme, wonach die Erteilung eines SEPA-Lastschriftmandats über einen Fernzugang einer starken Kundenauthentifizierung (SKA) unterliegt, hat zu Besorgnis auf dem Zahlungsverkehrsmarkt geführt. Die BaFin hat nun am 17. April 2019 klargestellt, dass sie eine SKA nicht für erforderlich hält, wenn der Zahlungsdienstleister des Zahlers nicht in den Prozess der Mandatserteilung eingebunden ist.

On 25 February 2019, the European Banking Authority (EBA) issued its final report on the EBA Draft Guidelines on outsourcing arrangements (the Draft EBA Guidelines on outsourcing). This Final Report follows a public consultation which ended on 24 September 2018. That public consultation was preceded by EBA's publication of a Consultation Paper on the EBA Draft Guidelines on Outsourcing arrangements (the Consultation Paper).