<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">.style1 {font-family: "Times New Roman";}</style></head><body dir="auto">
Hi Nat,
<div><br>
</div>
<div>Each EU member country’s National Competent Authority (NCA) adminIsters an authorization process for their PISPs and AISPs per PSD2 and the respective enacting regulations (eg PSR 2017 for the UK).</div>
<div><br>
</div>
<div>I went through the UK FCA’s process in 2018. Lots of focus on the customer journey and security detection and response.</div>
<div><br>
</div>
<div>It wasn’t the best assessment I’ve had, but certainly not the worst. Happy to share more if we’re thinking about raising the bar on certification standards or practices.</div>
<div><br>
</div>
<div>Kind Regards,</div>
<div>Brian<br>
<br>
<div dir="ltr"><span style="background-color: rgba(255, 255, 255, 0);">--------------------</span>
<div><span style="background-color: rgba(255, 255, 255, 0);">Brian J. Costello</span></div>
<div><span style="background-color: rgba(255, 255, 255, 0);">Envestnet | Yodlee</span></div>
<div><span style="background-color: rgba(255, 255, 255, 0);">c: +1 617 962 9742</span></div>
</div>
<div dir="ltr"><br>
<blockquote type="cite">On Jul 6, 2020, at 10:45 PM, Nat Sakimura via Openid-specs-fapi <openid-specs-fapi@lists.openid.net> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"> <span style="color: #FF0000;font-family: "calibri","sans-serif"; font-size:10pt;">
External email, verify before opening attachments or links.<br>
</span><br>
<br>
<div>
<div dir="ltr">Hi
<div><br>
</div>
<div>It is not really a technical spec issue but just out of curiosity: How are the appropriateness of data handling etc. of the TTPs (i.e., Fintechs) get verified under PSD2? Is there some kind of rules? Who is verifying that the TPP is trustworthy? </div>
<div><br>
</div>
<div>Best, </div>
<div><br>
</div>
<div>Nat Sakimura</div>
</div>
</div>
<span>_______________________________________________</span><br>
<span>Openid-specs-fapi mailing list</span><br>
<span>Openid-specs-fapi@lists.openid.net</span><br>
<span>http://lists.openid.net/mailman/listinfo/openid-specs-fapi</span><br>
</div>
</blockquote>
</div>
<br><br></body></html>