Outdated browser

You are using an outdated browser. DNB.nl works best with:

Strong customer authentication effective from 14 September 2019

Q&A

Published: 26 November 2019

Question:

What does DNB expect from payment service providers (PSPs) with respect to the application of strong customer authentication (SCA) effective from 14 September 2019?

Answer:

On 21 June and 16 October 2019 the European Banking Authority (EBA) published its opinions on the elements of SCA under PSD2 and the deadline for completing the migration to SCA.

The EBA acknowledged the challenges for several European market actors that arise from the changes that are required, and therefore allowed the national competent authorities to extend the SCA migration deadline for specific actors to 31 December 2020. The statutory RTS application date remains unchanged, however, at 14 September 2019.

DNB works together with the EBA to promote a smooth and uniform migration to SCA for online card payments, and therefore adopts the EBA’s opinion. DNB will report to the EBA on the progress of migration based on aggregated reports.

In line with the EBA’s opinion, PSPs wishing to make use of the extended SCA migration deadline for online payment transactions must draft and implement migration plans in 2019. DNB recommends that market actors work together to ensure an orderly phased migration to SCA, and to complete the process by 31 December 2020.

The Dutch Payments Association has taken the initiative to draft general migration plan templates that meet DNB’s requirements and coordinate the monitoring of the migration plans. PSPs that use these plans do not need to submit additional information to DNB. Supervised institutions not participating in this initiative and wishing to make use of the extended SCA migration deadline may submit their migration plans to DNB through their account supervisor before 1 December 2019.

Please contact the Dutch Payment Association for more information about the migration plan initiative at sca-migration@Betaalvereniging.nl.