EBA
European Banking Authority
The EU Digital Identity Wallet — who must accept it
Regulation (EU) 2024/1183 and the EU Digital Identity Wallet: the acceptance obligation for firms under strong authentication rules, and the deadlines.
Funds transfer information — payer and payee data
Regulation (EU) 2023/1113 for fiat transfers: the Article 4 payer and payee dataset, the intra-Union derogation and the three-working-day retrieval duty.
DORA threat-led penetration testing (TLPT)
TLPT under DORA Articles 26 and 27: who identifies the entities, who validates scope, testing on live systems every three years, and…
The PSD2 limited network exclusion — Article 3(k)
PSD2 Article 3(k) and 3(l): the three limited-network limbs, the functionally-connected test, the telecoms caps and the EUR 1 million notification.
Safeguarding compared across the EU
Safeguarding under PSD2 Article 10 and EMD2 Article 7: the segregation and insurance methods, the deadlines, and why eligible assets are national.
EBA remote customer onboarding guidelines
EBA/GL/2022/15 on remote customer onboarding: the pre-implementation assessment, the eIDAS shortcut, liveness rules and the review obligation.
PSD2 agents — the register and where liability sits
Using agents under PSD2 Article 19: what must be notified, the two-month response, why an agent may only start on registration, and…
Small payment institutions — the Article 32 exemption
The PSD2 Article 32 small payment institution regime: the monthly-average ceiling, why it cannot be passported, and how Article 33 differs for…
SCA exemptions under the PSD2 RTS
SCA exemptions: the contactless and low-value counters, the transaction-risk-analysis thresholds and reference fraud rates, and how an exemption is lost.
AMLA’s draft rules for cross-border STRs
AMLA's draft RTS on cross-border suspicious-transaction reports: how FIUs identify affected member states, and the 6 October 2026 consultation deadline.