{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2020-09-25","gaps":[],"covered":["EBA Q&A 2019_4800 — Q&A — Whitelisting [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting","title":"EBA Q&A 2019_4800 — Q&A — Whitelisting [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"EBA Q&A register, 25 September 2020","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"4e391269c1fbd450","change_date":null,"nearest_versions":["2020-09-25"],"first_text_date":null,"correction_applies":false,"versions":["2020-09-25"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting/versions/2020-09-25","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting/versions/2020-09-25/rev/4e391269c1fbd450","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 25 Sep 2020 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2020-09-25","question_submitted_on":"2019-06-19","locators":{"published_on":"EBA Q&A register entry 2019_4800, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2019_4800, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2019-4800-whitelisting.md","body_sha256":"df50bbb63409d2dbcdf577de7f0cbf16ae0ca3822510d8e5982fe3b1df9055d4"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2019_4800 — Q&A — Whitelisting [Final Q&A]\"\nshortTitle: \"EBA Q&A 2019_4800 — Q&A — Whitelisting [Final Q&A]\"\nanswer_id: EBA_QA_2019_4800\nstatus: \"Final Q&A\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: in_force\nregulation: \"PSD2\"\npsd2_level3: true\nmica_level2: false\nlegal_basis: \"Article 97 PSD2\"\ndate: 25 September 2020\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800\nlifecycle: \"Final Q&A\"\ntext_version: \"EBA Q&A register, 25 September 2020\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"EBA\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Answer prepared by the EBA.\"\n    locator: \"EBA Q&A register entry 2019_4800, field 'Answer prepared by'\"\ndocument_type: \"qa_answer\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2020-09-25\"\n  question_submitted_on: \"2019-06-19\"\n  locators:\n    published_on: \"EBA Q&A register entry 2019_4800, field 'Final publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2019_4800, field 'Submission date'\"\nlifecycle_label: \"Final Q&A\"\n---\n\n**Answer by the EBA, published in its Q&A tool · not legislation · published 25 Sep 2020 [Final Q&A]**\n\n*Final Q&A · EBA Q&A register, 25 September 2020 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2019_4800 — Q&A — Whitelisting \\[Final Q&A\\] |\n| **Prepared by** | EBA |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2019_4800 |\n| **Document type** | Q&A |\n| **Legal nature** | Not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 25 September 2020; question submitted 19 June 2019 |\n| **Legal basis** | Article 97 PSD2 |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Whitelisting**\n\n### Question\n\nWill a clearing house for distribution be enabled to facilitate the on-going maintenance of the whitelisting process?\n\n### Background\n\nIntermediaries (Online Travel Agencies (OTAs), Brands, and Global distribution Systems (GDS)) are able to document their brands and group structures for whitelisting.\n\nThe process of whitelisting each brand, location, or merchant places an undue burden on consumers to have all the information necessary to accurately complete the whitelisting process.\n\n***\n\n### Answer\n\nArticle 13(1) of the Commission Delegated Regulation (EU) 2018/389 sets out that a payer can create or amend a list of trusted beneficiaries only through its account servicing payment service provider (ASPSP). Therefore, the creation or amendment of a trusted beneficiary list through an intermediary does not meet the requirements in Article 13(1) of the Commission Delegated Regulation.\n\nHowever, this does not preclude ASPSPs from outsourcing the management of the trusted beneficiaries list to a third party, subject to compliance with the general requirements on outsourcing and the EBA Guidelines on Outsourcing arrangements (EBA/GL/2019/02).\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_4800)\n\n## Related Level 1 articles\n\n- [Article 97 — Authentication](../../../articles/97.md)\n"}