<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2015-12-23","gaps":[],"covered":["PSD2 L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/psd2/recitals/94","url":"https://www.headlesslaw.com/psd2/recitals/94","title":"Recital 94","family":"l1_recital_view","work_id":"psd2","view_of":"/psd2/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Directive (EU) 2015/2366, OJ L 337, 23.12.2015","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng","valid_from":"2015-12-23","valid_until":null,"content_id":"dcf430c861a62569","versions":["2015-12-23"],"version_url":"https://www.headlesslaw.com/psd2/recitals/94/versions/2015-12-23","revision_url":"https://www.headlesslaw.com/psd2/recitals/94/versions/2015-12-23/rev/dcf430c861a62569","versions_url":"https://www.headlesslaw.com/psd2/recitals/94/versions","relations_url":"https://www.headlesslaw.com/psd2/recitals/94/relations","act_url":"https://www.headlesslaw.com/psd2/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"psd2","path":"/psd2/recitals","name":"PSD2","number":"Directive (EU) 2015/2366","celex":"32015L2366","title_official":null,"document_date":null},"position":{"kind":"recital","key":"94","index":94,"articles":113,"annexes":0},"prev":{"path":"/psd2/recitals/93","key":"93","title":"Recital 93"},"next":{"path":"/psd2/recitals/95","key":"95","title":"Recital 95"},"act_anchor":""}}} -->
# Recital 94

*In force · Directive (EU) 2015/2366, OJ L 337, 23.12.2015 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/dir/2015/2366/oj/eng)*

When developing regulatory technical standards on authentication and communication, EBA should systematically assess and take into account the privacy dimension, in order to identify the risks associated with each of the technical options available and the remedies that could be put in place to minimise threats to data protection.