Second Payment Services Directive

Second Payment Services Directive
Name	Second Payment Services Directive
Abbr	PSD2
Type	Directive
Adopted	2015
Enacted	2015
Jurisdiction	European Union
Replaced	Payment Services Directive (Directive 2007/64/EC)
Status	In force

Second Payment Services Directive The Second Payment Services Directive is a European Union Directive adopted in 2015 to revise and modernize the legal framework for electronic payments across the European Union. It aimed to increase competition among banks, enhance security for payment transactions, and foster innovation from fintech firms by standardizing rules for payment service providers and access to account data. The directive interacts with other EU legal instruments such as the Revised Payment Services Directive proposals, the General Data Protection Regulation, and the Markets in Financial Instruments Directive.

Background and Objectives

The directive was developed against a backdrop of rapid expansion in electronic banking, the rise of mobile payments, and the emergence of third-party payment processors following events like the growth of PayPal, Stripe (company), and Square (company). Policymakers in the European Commission sought to update the earlier Payment Services Directive (Directive 2007/64/EC) to address issues raised by the financial crisis of 2007–2008, the expansion of online marketplaces, and technological developments led by companies such as Apple Inc. and Google. Key objectives included strengthening consumer protection, enhancing payment security standards after incidents linked to cybersecurity breaches involving institutions like the SWIFT network, and promoting competition to break perceived dominance by incumbent credit institutions such as Deutsche Bank, Banco Santander, and BNP Paribas.

Scope and Key Provisions

The directive expanded the scope of regulated payment services to cover new service categories including payment initiation services and account information services, thereby creating legal recognition for third-party providers like Adyen N.V., Revolut, and N26. It introduced strong customer authentication (SCA) requirements that referenced standards used by Europol and guidance from the European Banking Authority. PSD2 mandated access to customer payment account data for authorized providers, required transparency in pricing such as interchange fee caps similar to measures in Regulation (EC) No 924/2009, and addressed liability rules for unauthorized transactions influenced by precedents in cases brought before the Court of Justice of the European Union.

Regulatory Framework and Supervision

Supervisory responsibilities under the directive are allocated to national competent authorities like the Financial Conduct Authority in the United Kingdom (pre-Brexit), the Banque de France, and the Bundesanstalt für Finanzdienstleistungsaufsicht. The European Banking Authority issued regulatory technical standards to harmonize implementation across member states, coordinating with supra-national bodies such as the European Central Bank and the European Systemic Risk Board. Licensing and passporting mechanisms drew on principles used in the Capital Requirements Directive and the Insurance Distribution Directive to enable cross-border provision of services among Member States of the European Union.

Impact on Payment Service Providers and Market

PSD2 altered competitive dynamics, lowering barriers to entry for fintech startups like TransferWise (now Wise), Monzo, and Klarna. Established banks faced disintermediation risks as third-party payment providers gained account access; this prompted strategic responses from firms including partnerships and acquisitions involving corporations such as Visa and Mastercard (company). Market impacts included proliferation of API-driven services, new business models exemplified by firms like Plaid (company), and consolidation trends mirrored in the Mergers and acquisitions activity across the financial services sector.

Consumer Rights and Protections

PSD2 strengthened consumer rights by refining rules on liability for unauthorized transactions, improving transparency for fees and exchange rates, and requiring explicit consent for third-party access to account data. These protections interface with rights under the Charter of Fundamental Rights of the European Union and privacy safeguards under the General Data Protection Regulation. Enforcement actions and consumer remedies are administered by national bodies including the Ombudsman offices and financial regulators such as the Central Bank of Ireland for issues arising from institutions like Ulster Bank and AIB Group.

Implementation, Amendments and Compliance

Member states implemented PSD2 through transposition into national law, producing divergent timelines and approaches across jurisdictions such as Germany, France, and Poland. The directive was accompanied by Regulatory Technical Standards from the European Banking Authority to clarify SCA and secure communication requirements, and later adjustments addressed practical challenges encountered by actors like Royal Bank of Scotland and ING Group. Compliance programs encompass licensing, anti-money laundering measures governed by the Anti-Money Laundering Directive, and reporting obligations similar to those under the Payment Services Regulation frameworks; non-compliance has led to enforcement by authorities including the European Commission and national courts.

Criticisms and Legal Challenges

Critics including trade associations representing credit institutions and some consumer groups argued PSD2 imposed operational burdens and cybersecurity risks associated with open APIs, invoking debates in forums such as the European Parliament and the Council of the European Union. Legal challenges reached national courts and the Court of Justice of the European Union, addressing issues of data portability, contractual relationships among payment service providers, and the balance between competition policy under European Union competition law and financial stability considerations championed by central banks like the Deutsche Bundesbank. Ongoing policy discussions involve stakeholders including World Bank observers and international standard-setters like the Financial Stability Board.

Category:European Union directives