PSD2 – a game changing regulation

Most banks have legacy cores e.g. mainframe systems, data warehouses and payments infrastructure that were built years if not decades back. PSD2 works on an expectation of scalability, security and resilience that matches silicon valley firms that routinely offer open interfaces.

Banks also have slow change management processes, highly manual customer support and fragmented reference data which can make it difficult to respond to evolving customer needs with speed and effectiveness.

How will you systematically transform your operations and infrastructure for an open, rapid response future?

Find out more...

PSD2 has been introduced against a backdrop of high profile cyber attacks across industries. In a post-PSD2 environment, the primary responsibility for security risks will lie with payment service providers, and increasing the number of partners you interact with via APIs will increase your cyber attack surface and make you more vulnerable to data security breaches. Further, Cybersecurity breaches can expose you to severe financial crime and reputational incidents and fines.

While PSD2 requires opening up customer data to third parties, the new EU General Data Privacy Rules (GDPR) demand protecting customer data privacy as well as capturing and evidencing customer consent with potential steep penalties for breaches.

PSPs must ensure that comprehensive security measures are in place to protect the confidentiality and integrity of customers’ security credentials, assets and data.

Find out more...

Implementing PSD2 will require you to review key areas and processes across your organisation and is likely to increase compliance requirements:

The application of PSD2 across a wider geographical scope and to new currencies and transactions introduces new information requirements. All firms, including those already approved as PSPs, will need to confirm compliance with PSD2 and face new reporting requirements. Customers will need to be informed of revised rights and obligations. While, the obligation on account servicing payment service providers (ASPSPs) to grant access to customer accounts and to share data must implemented alongside the requirements of other key pieces of regulation such as the GDPR.

Find out more...

The opportunities and challenges that PSD2 provides, are likely going to impact and change the service offerings firms provide to their customers.

In doing so, this will lead to a reconsideration of the business operating model and how the organisation seeks to provide those new services to customers.

This change provides an opportunity to review and optimise the group tax structure.

Find out more...

PSD2 will increase competition in the payments sector by promoting open access to payment systems and accounts.

Although the introduction of PSD2 may be considered a threat to the traditional business model of payment processing companies, there are opportunities here to provide integration services into third-party networks and apps, as well as the point-of-sale systems of merchants.

The business models for credit card companies and cards divisions of banks may be affected by PSD2 as retailers and other industries switch to using open APIs rather than cards processing. Visa and Mastercard have announced innovation initiatives that indicate a focus on new services and revenue streams.

PSD2 will create new PSPs but also new competitors given the “Third Party Access” requirements. The Open Banking provisions in PSD allow non-banks, corporates (like Amazon) or FinTech businesses to directly access consumer bank accounts to perform payments activities and/or gain access to customer data . One UK retail bank has said this could mean £20m per annum of revenue lost if the 10 biggest retailers become authorised as PSPs.

From an end user perspective, customers are embracing new technology; the volume of online and mobile payments has increased significantly, and customers will be able to enjoy instantaneous payments via mobile wallets on many p2p accounts and towards operators with advanced features.

Consumer protection will be boosted through greater transparency of costs and protection from charges, including reduced liability for customers from fraudulent payments.