<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2015-12-23","gaps":[],"covered":["PSD2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/recitals/89","url":"https://www.headlesslaw.com/psd2/recitals/89","title":"Recital 89","family":"l1_recital_view","work_id":"psd2","view_of":"/psd2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive (EU) 2015/2366, OJ L 337, 23.12.2015","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng","valid_from":"2015-12-23","valid_until":null,"content_id":"c9af64180801a02f","versions":["2015-12-23"],"version_url":"https://www.headlesslaw.com/psd2/recitals/89/versions/2015-12-23","revision_url":"https://www.headlesslaw.com/psd2/recitals/89/versions/2015-12-23/rev/c9af64180801a02f","versions_url":"https://www.headlesslaw.com/psd2/recitals/89/versions","relations_url":"https://www.headlesslaw.com/psd2/recitals/89/relations","act_url":"https://www.headlesslaw.com/psd2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"psd2","path":"/psd2/recitals","name":"PSD2","number":"Directive (EU) 2015/2366","celex":"32015L2366","title_official":null,"document_date":null},"position":{"kind":"recital","key":"89","index":89,"articles":113,"annexes":0},"prev":{"path":"/psd2/recitals/88","key":"88","title":"Recital 88"},"next":{"path":"/psd2/recitals/90","key":"90","title":"Recital 90"},"act_anchor":""}}} -->
# Recital 89

*In force · Directive (EU) 2015/2366, OJ L 337, 23.12.2015 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng)*

Provision of payment services by the payment services providers may entail processing of personal data. Directive 95/46/EC of the European Parliament and of the Council, the national rules which transpose Directive 95/46/EC and Regulation (EC) No 45/2001 of the European Parliament and of the Council are applicable to the processing of personal data for the purposes of this Directive. In particular, where personal data is processed for the purposes of this Directive, the precise purpose should be specified, the relevant legal basis referred to, the relevant security requirements laid down in Directive 95/46/EC complied with, and the principles of necessity, proportionality, purpose limitation and proportionate data retention period respected. Also, data protection by design and data protection by default should be embedded in all data processing systems developed and used within the framework of this Directive.