{
  "url": "https://openlegislation.uk/eu-regulation-2018-389/article-13",
  "json_url": "https://openlegislation.uk/eu-regulation-2018-389/article-13.json",
  "legislation": "eur/2018/389",
  "legislation_title": "Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2018-389",
  "path": "article/13",
  "kind": "article",
  "number": "13",
  "heading": "Trusted beneficiaries",
  "text": "1. Payment service providers shall apply strong customer authentication where a payer creates or amends a list of trusted beneficiaries through the payer's account servicing payment service provider.\n2. Payment service providers shall be allowed not to apply strong customer authentication, subject to compliance with the general authentication requirements, where the payer initiates a payment transaction and the payee is included in a list of trusted beneficiaries previously created by the payer.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2018/389/article/13",
    "retrieved_at": "2026-11-01T14:44:14.007205+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}