> For the complete documentation index, see [llms.txt](https://www.headlesslaw.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.headlesslaw.com/psd2/articles/67.md).

# Article 67 — Rules on access to and use of payment account information in the case of account information services

*In force · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 8 Oct 2026 ·* [*Official source*](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)

1. Member States shall ensure that a payment service user has the right to make use of services enabling access to account information as referred to in point (8) of Annex I. That right shall not apply where the payment account is not accessible online.
2. The account information service provider shall:

   **(a)** provide services only where based on the payment service user’s explicit consent;

   **(b)** ensure that the personalised security credentials of the payment service user are not, with the exception of the user and the issuer of the personalised security credentials, accessible to other parties and that when they are transmitted by the account information service provider, this is done through safe and efficient channels;

   **(c)** for each communication session, identify itself towards the account servicing payment service provider(s) of the payment service user and securely communicate with the account servicing payment service provider(s) and the payment service user, in accordance with point (d) of [Article 98(1)](/psd2/articles/98.md);

   **(d)** access only the information from designated payment accounts and associated payment transactions;

   **(e)** not request sensitive payment data linked to the payment accounts;

   **(f)** not use, access or store any data for purposes other than for performing the account information service explicitly requested by the payment service user, in accordance with data protection rules.
3. In relation to payment accounts, the account servicing payment service provider shall:

   **(a)** communicate securely with the account information service providers in accordance with point (d) of [Article 98(1)](/psd2/articles/98.md); and

   **(b)** treat data requests transmitted through the services of an account information service provider without any discrimination for other than objective reasons.
4. The provision of account information services shall not be dependent on the existence of a contractual relationship between the account information service providers and the account servicing payment service providers for that purpose.

***

[Title IV — Rights and obligations in relation to the provision and use of payment services](/psd2/titles/iv.md) · [← Article 66](/psd2/articles/66.md) · [Article 68 →](/psd2/articles/68.md)