What PSD3 and PSR mean beyond compliance
November 2026. Based on the final compromise texts of April 2026. The Council approved them on 29 October 2026; the European Parliament still has to vote.
PSD3 and the PSR are easy to treat as a mapping exercise for legal and compliance. Their effects reach much further, into products, technology and operating models.
Interfaces
Account-servicing providers must offer a dedicated, secure interface for regulated data exchange, subject to certain exemptions. Users also get dashboards to monitor and withdraw data access.
Fraud
Payee verification, transaction monitoring and refund rights in certain impersonation cases tie fraud prevention directly to financial consequences.
Operating model
When control failures carry refund consequences, ownership and incident processes have to be reviewed along with the policy documents.
Run readiness as a joint programme of product, technology, risk and compliance.