The European Commission at long last adopted the RTS on Strong Customer
Authentication (SCA) under PSD2 on 27 November following some
political struggle. As expected the Commission has added a
further exemption from SCA which will benefit corporates. This
concerns electronic payment transactions performed through
dedicated payment processes or protocols. These are typically used
by corporates where security is achieved other than by
authenticating an individual.
Again, to assuage the concerns of payment initiation and account
information firms, the Commission will allow the use of customer
user-facing interfaces as a fall-back mechanism for dedicated
interfaces offered by ASPS PS, where these are either unavailable
or perform inadequately (but screen scraping per se will not be
permitted). National regulators, however, will be able to exempt
ASPS PS from the fall-back mechanism if certain conditions are met
around the operation of dedicated interfaces.
