What changed, Directive (EU) 2015/2366

+ (j) services provided by technical service providers, which support the provision of payment services, without them entering at any time into possession of the funds to be transferred, including processing and storage of data, trust and privacy protection services, data and entity authentication, in…
− (j) services provided by technical service providers, which support the provision of payment services, without them entering at any time into possession of the funds to be transferred, including processing and storage of data, trust and privacy protection services, data and entity authentication, in…
+ **1.** For authorisation as a payment institution, an application shall be submitted to the competent authorities of the home Member State, together with the following:(a) a programme of operations setting out in particular the type of payment services envisaged;(b) a business plan including a forec…
− **1.** For authorisation as a payment institution, an application shall be submitted to the competent authorities of the home Member State, together with the following:(a) a programme of operations setting out in particular the type of payment services envisaged;(b) a business plan including a forec…
+ The security control and mitigation measures referred to in point (j) of the first subparagraph shall indicate how they ensure a high level of digital operational resilience in accordance with Chapter II of Regulation (EU) 2022/2554, in particular in relation to technical security and data protectio…
− The security control and mitigation measures referred to in point (j) of the first subparagraph shall indicate how they ensure a high level of technical security and data protection, including for the software and IT systems used by the applicant or the undertakings to which it outsources the whole …
+ **1.** Directives 86/635/EEC and 2013/34/EU, and Regulation (EC) No 1606/2002 of the European Parliament and of the Council (8), shall apply to payment institutions *mutatis mutandis*.
− **1.** Directives 86/635/EEC and 2013/34/EU, and Regulation (EC) No 1606/2002 of the European Parliament and of the Council (7), shall apply to payment institutions *mutatis mutandis*.
+ Outsourcing of important operational functions, including ICT systems, shall not be undertaken in such way as to impair materially the quality of the payment institution’s internal control and the ability of the competent authorities to monitor and retrace the payment institution’s compliance with a…
− Outsourcing of important operational functions, including IT systems, shall not be undertaken in such way as to impair materially the quality of the payment institution’s internal control and the ability of the competent authorities to monitor and retrace the payment institution’s compliance with al…
+ **3.** Member States shall ensure that where a participant in a payment system designated under Directive 98/26/EC of the European Parliament and of the Council (9) allows an authorised or registered payment service provider that is not a participant in the system to pass transfer orders through the…
− **3.** Member States shall ensure that where a participant in a payment system designated under Directive 98/26/EC of the European Parliament and of the Council (8) allows an authorised or registered payment service provider that is not a participant in the system to pass transfer orders through the…
+ **1.** By way of safeguard for the stability and integrity of payment systems, payment institutions and electronic money institutions requesting participation and participating in systems designated under Directive 98/26/EC shall have in place the following:(a) a description of the measures taken fo…
− **1.** By way of safeguard for the stability and integrity of payment systems, payment institutions and electronic money institutions requesting participation and participating in systems designated under Directive 98/26/EC shall have in place the following:(a) a description of the measures taken fo…
+ 
+ The first subparagraph is without prejudice to the application of Chapter II of Regulation (EU) 2022/2554 to:
+ 
+ (a) payment service providers referred to in points (a), (b) and (d) of Article 1(1) of this Directive;
+ 
+ (b) account information service providers referred to in Article 33(1) of this Directive;
+ 
+ (c) payment institutions exempted pursuant to Article 32(1) of this Directive; and
+ 
+ (d) electronic money institutions benefitting from a waiver as referred to in Article 9(1) of Directive 2009/110/EC.
+ **7.** Members States shall ensure that paragraphs 1 to 5 of this Article do not apply to:(a) payment service providers referred to in points (a), (b) and (d) of Article 1(1) of this Directive;(b) account information service providers referred to in Article 33(1) of this Directive;(c) payment instit…
+ 
+ **5.** In accordance with Article 10 of Regulation (EU) No 1093/2010, EBA shall review and, if appropriate, update the regulatory technical standards on a regular basis in order, inter alia, to take account of innovation and technological developments, and of the provisions of Chapter II of Regulati…
− **5.** In accordance with Article 10 of Regulation (EU) No 1093/2010, EBA shall review and, if appropriate, update the regulatory technical standards on a regular basis in order, inter alia, to take account of innovation and technological developments.
+ **1.** Member States shall ensure that adequate, independent, impartial, transparent and effective ADR procedures for the settlement of disputes between payment service users and payment service providers concerning the rights and obligations arising under Titles III and IV of this Directive are est…
− **1.** Member States shall ensure that adequate, independent, impartial, transparent and effective ADR procedures for the settlement of disputes between payment service users and payment service providers concerning the rights and obligations arising under Titles III and IV of this Directive are est…
+ (1) in Article 1, paragraph 2 is replaced by the following: **‘2.** The Authority shall act within the powers conferred by this Regulation and within the scope of, Directive 2002/87/EC, Directive 2009/110/EC, Regulation (EU) No 575/2013 of the European Parliament and of the Council (*3), Directive 2…
− (1) in Article 1, paragraph 2 is replaced by the following: **‘2.** The Authority shall act within the powers conferred by this Regulation and within the scope of, Directive 2002/87/EC, Directive 2009/110/EC, Regulation (EU) No 575/2013 of the European Parliament and of the Council (*3), Directive 2…