{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2019-04-26","gaps":[],"covered":["EBA Q&A 2018_4432 — Q&A — Passporting and eIDAS certificates [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates","title":"EBA Q&A 2018_4432 — Q&A — Passporting and eIDAS certificates [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 26 April 2019","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"b03445eaf8f9688a","change_date":null,"nearest_versions":["2019-04-26"],"first_text_date":null,"correction_applies":false,"versions":["2019-04-26"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates/versions/2019-04-26","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates/versions/2019-04-26/rev/b03445eaf8f9688a","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 26 Apr 2019 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2019-04-26","question_submitted_on":"2018-12-21","locators":{"published_on":"EBA Q&A register entry 2018_4432, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2018_4432, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2018-4432-passporting-and-eidas-certificates.md","body_sha256":"1738facbe184cc2a2de2051f5d9ceeea4beda2cf98a565902057cbfb98cae28d"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2018_4432 — Q&A — Passporting and eIDAS certificates [Final Q&A]\"\nshortTitle: \"EBA Q&A 2018_4432 — Q&A — Passporting and eIDAS certificates [Final Q&A]\"\nanswer_id: EBA_QA_2018_4432\nstatus: \"Final Q&A\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: in_force\nregulation: \"PSD2\"\npsd2_level3: true\nmica_level2: false\nlegal_basis: \"Article 28(5) PSD2\"\ndate: 26 April 2019\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432\nlifecycle: \"Final Q&A\"\ntext_version: \"EBA Q&A register, 26 April 2019\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"EBA\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Answer prepared by the EBA.\"\n    locator: \"EBA Q&A register entry 2018_4432, field 'Answer prepared by'\"\ndocument_type: \"qa_answer\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2019-04-26\"\n  question_submitted_on: \"2018-12-21\"\n  locators:\n    published_on: \"EBA Q&A register entry 2018_4432, field 'Final publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2018_4432, field 'Submission date'\"\nlifecycle_label: \"Final Q&A\"\n---\n\n**Answer by the EBA, published in its Q&A tool · not legislation · published 26 Apr 2019 [Final Q&A]**\n\n*Final Q&A · EBA Q&A register, 26 April 2019 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2018_4432 — Q&A — Passporting and eIDAS certificates \\[Final Q&A\\] |\n| **Prepared by** | EBA |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2018_4432 |\n| **Document type** | Q&A |\n| **Legal nature** | Not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 26 April 2019; question submitted 21 December 2018 |\n| **Legal basis** | Article 28(5) PSD2 |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Passporting and eIDAS certificates**\n\n### Question\n\nDo account servicing payment service providers (ASPSPs) have to check that third party providers (TPPs) are authorised to operate in their Member State via freedom to deliver services passporting? If so, how shall this be done?\n\n### Background\n\neIDAS certificates do not contain any information on passporting. Thus ASPSPs in the host member state cannot check passporting status based on the certificate. If they were requested to check the status they would have to retrieve this from other sources, e.g. the EBA register. Such an additional step would cause delays in the ‘customer journey’ as rightly pointed out (in a slightly different context) in EBA-Op-2018-7 item 30.\n\n***\n\n### Answer\n\nArticle 34(1) of the Commission Delegated Regulation (EU) 2018/389 states that for the purpose of identification, payment service providers shall rely on eIDAS certificates. The Delegated Regulation does not require account servicing payment service providers (ASPSPs) to carry out additional checks for the purpose of identification. Given eIDAS certificates do not contain information on passporting, ASPSPs are not legally required to check any passporting information related to the third party provider (TPP) requesting access to online payment accounts.\n\nIn addition, Article 68(5) of PSD2 states that an ASPSP ‘may deny an account information service provider or a payment initiation service provider access to a payment account for objectively justified and duly evidenced reasons relating to unauthorised or fraudulent access to the payment account by that account information service provider or that payment initiation service provider’. Given eIDAS certificates do not contain passporting information (as stated above) and that ASPSPs do not therefore have to check passporting rights for the purpose of identification, ASPSPs should not block access to an account on the basis of the absence of information on whether or not a TPP is allowed to provide services in the host Member State.\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2018_4432)\n\n## Related Level 1 articles\n\n- [Article 28 — Application to exercise the right of establishment and freedom to provide services](../../../articles/28.md)\n"}