21 September 2017
visit www.avoka.com

Payment industry unprepared for impending PSD2 regulation

01 June 2017  |  3203 views  |  0 Source: Ping Identity

New research, released today by Ping Identity, reveals that just 46 per cent of payment service providers (PSP) are prepared to comply with the upcoming PSD2 regulation.

Expanding the reach of the original Payment Services Directive (PSD), the revised payments directive continues Europe´s goal to modernise, unify and open its financial landscape.

The research, which explores the current state of the payment industry in relation to the EU initiative, highlights a clear lack of education and understanding across businesses in the UK. Of those asked, 44 per cent admitted to not knowing the necessary changes needed to comply, despite the regulation’s direct impact to their business. A further 29 per cent say they are aware of the changes, but do not understand them.

Although payment service providers are obligated to conform to the regulation, just 12 per cent are aware that the new initiative will become active on 13th January 2018. In addition, 35 per cent are unsure if they will reach compliance in time, with just three in ten reporting they will get there without a struggle.

The main scope of PSD2 requires account servicing payment service providers (ASPSPs) to expose open APIs to open their customer data if the customer has given their explicit consent. These third parties can then connect to bank accounts and retrieve information. Just eight per cent see this as having a positive impact on their wider business, while almost half see opening customer data up to third parties as a negative requirement. Almost 40 per cent of respondents also believe that this expanded scope of the regulation will have a negative effect on customer experience.

While some organisations feel the implementation of PSD2 will not pose any threat to the wider business, higher levels of vulnerability to fraud is an issue that 19 per cent feel they may be exposed to once the legislation comes into force next year.

Phil Allen, Vice President EMEA of Ping Identity comments, “This research has highlighted that even though the majority of organisations are aware of what is required with PSD2, there’s clearly a lot to be done from both an educational and implementation point of view. Instead of simply seeing PSD2 as another regulation to comply with, organisations should strive to go above and beyond, setting themselves apart from competition, and providing customers with the best, and most secure user experience possible — and strong solutions exist.”

Allen continues, “With changes occurring across the industry, including the UK’s open banking initiative, it’s an important time for businesses to ensure they have the best security processes in place. Opening customer data up to third parties means allowing them access to certain parts of your network that in turn can create vulnerabilities. If compliance and implementation are done correctly, the PSD2 has the ability to transform the financial market as we know it, improving customer experiences — something that is essential to the UK economy.”

When asked if they feel enough information is available around the new legislation, just 26 per cent agreed, while the majority (74 per cent) either disagreed or were unsure.

The 144 survey respondents were members of management and senior staff in UK financial services organisations, all with 250 employees or more. The research was commissioned in April 2017 by Ping Identity, in association with research house, One Poll.

Comments: (0)

Comment on this story (membership required)

Related blogs

Create a blog about this story (membership required)
download the paper nowvisit www.capgemini.comvisit www.sibos.com

Top topics

Most viewed Most shared
HSBC switches on selfie payments in ChinaHSBC switches on selfie payments in China
11955 views comments | 24 tweets | 41 linkedin
Equifax hack: Visa and Mastercard flag 200k compromised credit cardsEquifax hack: Visa and Mastercard flag 200...
10725 views comments | 6 tweets | 17 linkedin
Dutch bank sentences teenage DDoS culprit to community serviceDutch bank sentences teenage DDoS culprit...
9396 views comments | 6 tweets | 3 linkedin
UAE banks pool cyber security dataUAE banks pool cyber security data
7966 views comments | 5 tweets | 4 linkedin
Apple P2P payments service nears launchApple P2P payments service nears launch
7959 views comments | 18 tweets | 26 linkedin

Featured job

Competitive base, double ote, benefits
London, UK

Find your next job