<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2022-02-11","gaps":[],"covered":["EBA Q&A 2018_4339 — Q&A — 90 Day Access via Direct Access [Rejected question] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access","title":"EBA Q&A 2018_4339 — Q&A — 90 Day Access via Direct Access [Rejected question]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access","status":"rejected question","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 11 February 2022","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4339","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"46519d968b0d172a","change_date":null,"nearest_versions":["2022-02-11"],"first_text_date":null,"correction_applies":false,"versions":["2022-02-11"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access/versions/2022-02-11","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access/versions/2022-02-11/rev/46519d968b0d172a","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4339-90-day-access-via-direct-access/relations","source_line":"Question published in the EBA Q&A tool · no answer · not legislation · published 11 Feb 2022 [Rejected question]","attribution":{"prepared_by":"not stated in the document","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_question","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2022-02-11","question_submitted_on":"2018-10-24","locators":{"published_on":"EBA Q&A register entry 2018_4339, field 'Rejected publishing date'","question_submitted_on":"EBA Q&A register entry 2018_4339, field 'Submission date'"}},"adoption":null}}} -->
---
title: "EBA Q&A 2018_4339 — Q&A — 90 Day Access via Direct Access [Rejected question]"
shortTitle: "EBA Q&A 2018_4339 — Q&A — 90 Day Access via Direct Access [Rejected question]"
answer_id: EBA_QA_2018_4339
status: "Rejected question"
type: qa
instrument_type: qa
authority: EBA
binding: false
binding_character: non_binding
legal_status: withdrawn
regulation: "PSD2"
psd2_level3: true
mica_level2: false
legal_basis: "Article 98 PSD2"
date: 11 February 2022
source_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4339
lifecycle: "Rejected question"
text_version: "EBA Q&A register, 11 February 2022"
source_url: "https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4339"
check_status: matched
verified: true
last_checked: 2026-10-26
checked_against: "the EBA publication"
source:
  prepared_by: "not stated in the document"
  published_by: "EBA"
  published_in: "EBA Single Rulebook Q&A tool"
  evidence:
    prepared_by: "Other"
    locator: "EBA Q&A register entry 2018_4339: no answer; the register names only the 'Type of submitter'"
document_type: "qa_question"
legal_nature: "not_legislation"
addressees: "not stated in the document"
dates:
  published_on: "2022-02-11"
  question_submitted_on: "2018-10-24"
  locators:
    published_on: "EBA Q&A register entry 2018_4339, field 'Rejected publishing date'"
    question_submitted_on: "EBA Q&A register entry 2018_4339, field 'Submission date'"
lifecycle_label: "Rejected question"
---

**Question published in the EBA Q&A tool · no answer · not legislation · published 11 Feb 2022 [Rejected question]**

*Rejected question · EBA Q&A register, 11 February 2022 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4339)*

| | |
|---|---|
| **Full title** | EBA Q&A 2018_4339 — Q&A — 90 Day Access via Direct Access \[Rejected question\] |
| **Prepared by** | Not stated in the document |
| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |
| **Reference** | EBA_QA_2018_4339 |
| **Document type** | Q&A |
| **Legal nature** | No answer · not legislation |
| **Addressees** | Not stated in the document |
| **Dates** | Published 11 February 2022; question submitted 24 October 2018 |
| **Legal basis** | Article 98 PSD2 |
| **Related instruments** | None recorded |
| **Text on this page** | Word for word — the full text of the EBA publication |

**90 Day Access via Direct Access**

### Question

Should any solution which involves direct access, whether as a strategic solution to PSD2, or in relation to the obligation to provide a fallback interface, ensure that Account Information Service Providers (AISPs) can access the interface in the same manner as the dedicated interface, specifically on an ongoing basis and for a maximum of 90 days once the customer has provided consent and authenticated using strong customer authentication (SCA)?

### Background

All the Application Programming Interface (API) standards being developed to support the RTS on strong customer authentication and secure communication dedicated interfaces support AISPs gaining access to account information for 90 days a time. Some Account Servicing Payment Service Providers (ASPSPs) seem to think they can avoid this obligation when access "direct access" rather than via a dedicated interface.

***

### Answer

Please note that as part of adjustments to the Single Rulebook Q&A process, agreed by the EBA and the European Commission, it has been decided to reject outstanding questions submitted before 1 January 2020, when the Q&A process was updated as part of the last ESAs Review. In particular, the question that you have submitted has now regrettably been rejected and will not be addressed.

If you believe your question would still benefit from clarification, you are invited to resubmit your question, adapting it to reflect any legislative, regulatory or other relevant developments that may have occurred since the initial date of submission. The EBA will aim to address resubmitted questions as a matter of priority. When considering to resubmit, you are kindly requested to observe the updated admissibility criteria agreed in the context of the adjustment of the Q&A process, available in the Additional background and guidance for asking questions. We hope for your understanding.

For further information please refer to the press release and the updated Q&A page.

***

**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4339)

## Related Level 1 articles

- [Article 98 — Regulatory technical standards on authentication and communication](../../../articles/98.md)