{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2021-04-23","gaps":[],"covered":["EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 [Final Q&A] L3"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"the EBA publication"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33","url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33","title":"EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 [Final Q&A]","family":"l3","work_id":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33","status":"final q&a","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"EBA Q&A register, 23 April 2021","check":{"against":"the EBA publication","on":"2026-10-26"},"check_result":"matched","official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054","valid_from":"0001-01-01","valid_until":null,"revision":1,"content_id":"fcb62e3c93b73230","change_date":null,"nearest_versions":["2021-04-23"],"first_text_date":null,"correction_applies":false,"versions":["2021-04-23"],"version_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33/versions/2021-04-23","revision_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33/versions/2021-04-23/rev/fcb62e3c93b73230","versions_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33/versions","relations_url":"https://www.headlesslaw.com/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33/relations","source_line":"Answer by the EBA, published in its Q&A tool · not legislation · published 23 Apr 2021 [Final Q&A]","attribution":{"prepared_by":"EBA","published_by":"EBA","published_in":"EBA Single Rulebook Q&A tool","document_type":"qa_answer","legal_nature":"not_legislation","addressees":"not stated in the document","dates":{"published_on":"2021-04-23","question_submitted_on":"2019-12-19","locators":{"published_on":"EBA Q&A register entry 2019_5054, field 'Final publishing date'","question_submitted_on":"EBA Q&A register entry 2019_5054, field 'Submission date'"}},"adoption":null}},"provenance":{"official_url":"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054","check":{"result":"matched","checked_at":"2026-10-26","against":"the EBA publication"},"repo_path":"spaces/psd2/level-3/q-and-a/eba/eba-qa-2019-5054-contingency-measures-under-article-33.md","body_sha256":"6d438be7f325d3debad9f63853b9147884b7d4bad2fb0d4a503d2447aa00acfa"},"units":[],"markdown":"---\ntitle: \"EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 [Final Q&A]\"\nshortTitle: \"EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 [Final Q&A]\"\nanswer_id: EBA_QA_2019_5054\nstatus: \"Final Q&A\"\ntype: qa\ninstrument_type: qa\nauthority: EBA\nbinding: false\nbinding_character: non_binding\nlegal_status: in_force\nregulation: \"PSD2\"\npsd2_level3: true\nmica_level2: false\nlegal_basis: \"Article 97 PSD2\"\ndate: 23 April 2021\nsource_link: https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054\nlifecycle: \"Final Q&A\"\ntext_version: \"EBA Q&A register, 23 April 2021\"\nsource_url: \"https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\nchecked_against: \"the EBA publication\"\nsource:\n  prepared_by: \"EBA\"\n  published_by: \"EBA\"\n  published_in: \"EBA Single Rulebook Q&A tool\"\n  evidence:\n    prepared_by: \"Answer prepared by the EBA.\"\n    locator: \"EBA Q&A register entry 2019_5054, field 'Answer prepared by'\"\ndocument_type: \"qa_answer\"\nlegal_nature: \"not_legislation\"\naddressees: \"not stated in the document\"\ndates:\n  published_on: \"2021-04-23\"\n  question_submitted_on: \"2019-12-19\"\n  locators:\n    published_on: \"EBA Q&A register entry 2019_5054, field 'Final publishing date'\"\n    question_submitted_on: \"EBA Q&A register entry 2019_5054, field 'Submission date'\"\nlifecycle_label: \"Final Q&A\"\n---\n\n**Answer by the EBA, published in its Q&A tool · not legislation · published 23 Apr 2021 [Final Q&A]**\n\n*Final Q&A · EBA Q&A register, 23 April 2021 · Checked against the EBA publication on 26 Oct 2026 · [Official source](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054)*\n\n| | |\n|---|---|\n| **Full title** | EBA Q&A 2019_5054 — Q&A — Contingency Measures under Article 33 \\[Final Q&A\\] |\n| **Prepared by** | EBA |\n| **Published by** | EBA, in the EBA Single Rulebook Q&A tool |\n| **Reference** | EBA_QA_2019_5054 |\n| **Document type** | Q&A |\n| **Legal nature** | Not legislation |\n| **Addressees** | Not stated in the document |\n| **Dates** | Published 23 April 2021; question submitted 19 December 2019 |\n| **Legal basis** | Article 97 PSD2 |\n| **Related instruments** | None recorded |\n| **Text on this page** | Word for word — the full text of the EBA publication |\n\n**Contingency Measures under Article 33**\n\n### Question\n\nDoes fallback access to a secondary instance of the dedicated interface in a different data center with dedicated resources, provide an acceptable strategy and plan for the contingency mechanism?\n\n### Background\n\nThe RTS on strong customer authentication and secure communication under PSD2 requires Account Servicing Payment Service Providers (ASPSPs) to include, in the design of the dedicated interface a strategy and plans for contingency measures for the event the interface does not perform in compliance with Article 32, that there is unplanned unavailability of the interface and that there is a systems breakdown.\n\n***\n\n### Answer\n\nArticle 31 of the Commission Delegated Regulation (EU) 2018/389, states that account servicing payment service providers (ASPSPs) shall ‘establish the interface(s) referred to in Article 30 by means of a dedicated interface or by allowing the use by the payment service providers referred to in Article 30(1) of the interfaces used for authentication and communication with the account servicing payment service provider's payment services users.’\n\nArticle 33(4) of the Delegated Regulation requires ASPSPs to set up a contingency mechanism and specifies that “as part of a contingency mechanism, payment service providers referred to in Article 30(1) shall be allowed to make use of the interfaces made available to the payment service users for the authentication and communication with their account servicing payment service provider, until the dedicated interface is restored to the level of availability and performance provided for in Article 32.”\n\nArticle 33(6) of the Delegated Regulation allows for ASPSPs to be exempted from the obligation to set-up the contingency mechanism if certain conditions are met. Provided that an ASPSP has not received such an exemption, they are required to set-up a contingency mechanism.\n\nAs detailed in Article 33(4) of the Delegated Regulation, as part of the contingency mechanism third party providers shall be allowed to make use of the interface(s) made available to the payment service users for the authentication and communication with their ASPSPs. A secondary dedicated interface, available only to payment service providers, would not fulfill that requirement.\n\nFurther, it should be noted that, in accordance with Article 33(5) of the Delegated Regulation, access to the interface made available to the payment service users for the authentication and communication with their ASPSPs, as part of the contingency mechanism, requires ASPSPs to ensure the payment service providers can be identified, avoiding the risk of unidentified access through the customer interface.\n\n***\n\n**Source:** [EBA original document](https://www.eba.europa.eu/single-rule-book-qa/qna/view/publicId/2019_5054)\n\n## Related Level 1 articles\n\n- [Article 97 — Authentication](../../../articles/97.md)\n"}