Featured Product

    EBA Proposes to Revise Guidelines on Incident Reporting Under PSD2

    October 14, 2020

    EBA proposed revisions to the guidelines on major incident reporting under the second Payment Service Directive (PSD2). The revisions aim to optimize and simplify the reporting process, decrease the reporting burden on payment service providers, and improve meaningfulness of the incident reports received. The comment period for the proposal ends on December 14, 2020 while the revised guidelines are expected to become applicable in the fourth quarter of 2021.

    The existing guidelines on major incident reporting set out, among others, the criteria, thresholds, and methodology to be used by the payment service providers to determine whether or not an operational or security incident should be considered major and how the said incident should be notified to the competent authorities in the home member state. The consultation paper proposes the following:

    • Introduction of the new incident classification criterion "breach of security measures" to capture security incidents when a breach of the security measures of the payment service provider has an impact on the availability, integrity, confidentiality, and/or authenticity of the payment services data, processes, and/or systems.
    • Introduction of changes to the thresholds for calculation of the criteria "transactions affected" and "payment service users affected"
    • Use of a standardized file for reporting major incident reports, streamlining the reporting template, and adding further granularity to the reported causes of incidents and aligning those incidents to other incident reporting frameworks in EU, to improve quality of the collected reports
    • Removal of the regular updates on the intermediate report from payment service providers to the competent authorities, extension of deadline for submission of the final report, and significant reduction in the fields in the reporting template, with the goal of reducing the reporting burden to payment service providers

    EBA has aligned the taxonomy on the causes of the major incidents to other incident reporting frameworks that had been developed by the European Union Agency for Cybersecurity and the Single Supervisory Mechanism of the Eurozone and has added further granularity to some causes of incidents. EBA mentions that EC has published, on September 24, 2020, a new EU legislative proposal for the EU regulatory framework on digital operational resilience, which contains a proposal for incident reporting that is inspired by PSD2 but goes beyond the payments-related incidents. The final details of that framework will not be known for several years, after which further time is expected to pass before they become legally applicable. However, the revised guidelines proposed in this consultation paper are expected to become applicable in the fourth quarter of 2021. These revised guidelines will remain in force at least until the EU regulatory framework on digital operational resilience requirements enters into force. 


    Related Links

    Comment Due Date: December 14, 2020

    Effective Date (expected): Q4 2021

    Keywords: Europe, EU, Banking, PSD2, Reporting, Payment Service Providers, Incident Reporting, Cyber Risk, Operational Resilience, Operational Resilience, Operational Risk, EBA 

    Featured Experts
    Related Articles

    US Agencies Issue Several Regulatory and Reporting Updates

    The Board of Governors of the Federal Reserve System (FED) adopted the final rule on Adjustable Interest Rate (LIBOR) Act.

    January 04, 2023 WebPage Regulatory News

    ECB Issues Multiple Reports and Regulatory Updates for Banks

    The European Central Bank (ECB) published an updated list of supervised entities, a report on the supervision of less significant institutions (LSIs), a statement on macro-prudential policy.

    January 01, 2023 WebPage Regulatory News

    HKMA Keeps List of D-SIBs Unchanged, Makes Other Announcements

    The Hong Kong Monetary Authority (HKMA) published a circular on the prudential treatment of crypto-asset exposures, an update on the status of transition to new interest rate benchmarks.

    December 30, 2022 WebPage Regulatory News

    EU Issues FAQs on Taxonomy Regulation, Rules Under CRD, FICOD and SFDR

    The European Commission (EC) adopted the standards addressing supervisory reporting of risk concentrations and intra-group transactions, benchmarking of internal approaches, and authorization of credit institutions.

    December 29, 2022 WebPage Regulatory News

    CBIRC Revises Measures on Corporate Governance Supervision

    The China Banking and Insurance Regulatory Commission (CBIRC) issued rules to manage the risk of off-balance sheet business of commercial banks and rules on corporate governance of financial institutions.

    December 29, 2022 WebPage Regulatory News

    HKMA Publications Address Sustainability Issues in Financial Sector

    The Hong Kong Monetary Authority (HKMA) made announcements to address sustainability issues in the financial sector.

    December 23, 2022 WebPage Regulatory News

    EBA Updates Address Basel and NPL Requirements for Banks

    The European Banking Authority (EBA) published regulatory standards on identification of a group of connected clients (GCC) as well as updated the lists of identified financial conglomerates.

    December 22, 2022 WebPage Regulatory News

    ESMA Publishes 2022 ESEF XBRL Taxonomy and Conformance Suite

    The General Board of the European Systemic Risk Board (ESRB), at its December meeting, issued an updated risk assessment via the quarterly risk dashboard and held discussions on key policy priorities to address the systemic risks in the European Union.

    December 22, 2022 WebPage Regulatory News

    FCA Sets up ESG Committee, Imposes Penalties, and Issues Other Updates

    The Financial Conduct Authority (FCA) is seeking comments, until December 21, 2022, on the draft guidance for firms to support existing mortgage borrowers.

    December 20, 2022 WebPage Regulatory News

    FSB Reports Assess NBFI Sector and Progress on LIBOR Transition

    The Financial Stability Board (FSB) published a report that assesses progress on the transition from the Interbank Offered Rates, or IBORs, to overnight risk-free rates as well as a report that assesses global trends in the non-bank financial intermediation (NBFI) sector.

    December 20, 2022 WebPage Regulatory News
    RESULTS 1 - 10 OF 8697