{
  "url": "https://openlegislation.uk/eu-regulation-2018-389/article-10",
  "json_url": "https://openlegislation.uk/eu-regulation-2018-389/article-10.json",
  "legislation": "eur/2018/389",
  "legislation_title": "Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2018-389",
  "path": "article/10",
  "kind": "article",
  "number": "10",
  "heading": "Payment account information",
  "text": "1. Payment service providers shall be allowed not to apply strong customer authentication, subject to compliance with the requirements laid down in Article 2 and to paragraph 2 of this Article and, where a payment service user is limited to accessing either or both of the following items online without disclosure of sensitive payment data:\n(a) the balance of one or more designated payment accounts;\n(b) the payment transactions executed in the last 90 days through one or more designated payment accounts.\n2. For the purpose of paragraph 1, payment service providers shall not be exempted from the application of strong customer authentication where either of the following condition is met:\n(a) the payment service user is accessing online the information specified in paragraph 1 for the first time;\n(b) more than 90 days have elapsed since the last time the payment service user accessed online the information specified in paragraph 1(b) and strong customer authentication was applied.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2018/389/article/10",
    "retrieved_at": "2026-11-01T14:44:14.007205+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}