Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think that will come. It will take a bit of time for comfort to set in (both with the consumer and the banks) but I definitely see this as the first step.

(edit; in addition the psd2 legislatiob, and specifically the technical guidance, does touch on concepts like 4th party, relaying parties and technical partners - so the exoectation of the regulator is that this will emerge)



I'm struggling with the enterprise-y terminology. It sounds like:

  * your bank is an "ASPSP"
  * the second party is you
  * the company (third party) is the AISP
So each individual company that needs to access your information is an AISP (or PISP for initiating payments)? Your accountant might be an AISP and your water company a PISP? And FCA requirements are (https://www.fca.org.uk/firms/new-regulated-payment-services-...):

"For businesses that only carry on account information services, there is an option to become a ‘registered account information service provider’. These providers have no capital requirements and need to meet fewer conditions than authorised firms. Businesses that provide payment initiation services must be authorised and must have a minimum of €50,000 in initial capital (or higher if they provide certain other payment services). Both AISPs and PISPs have to hold professional indemnity insurance (PII). The EBA has developed Guidelines on PII (link is external)."

Correct? This doesn't specifically rule out being a relay, but I guess there is more detail/restrictions in another document.

See also: https://www.out-law.com/en/articles/2017/june/fca-urged-to-a...


Yes that is an accurate summary.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: