# The Payment Services Regulations 2017, Regulation 97: Consent for use of personal data


A payment service provider must not access, process or retain any personal data for the provision of payment services by it, unless it has the explicit consent of the payment service user to do so.

---
Source: https://www.legislation.gov.uk/uksi/2017/752/regulation/97 (the official version)
Page: https://openlegislation.uk/payment-services-regulations-2017/regulation-97
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.