Changes from report parliamentary committee draft to plenary report

Added(i) a description of the principles and definitions applied for the collection of statistical data on performance, transactions and fraud;

Added(j) a security policy document, including:

Added(i) a detailed risk assessment in relation to the applicant’s payment and electronic money services;

Added(ii) a description of security control and mitigation measures to adequately protect payment service users against the risks identified, including fraud and the illegal use of sensitive and personal data;

Added(iii) for applicant institutions wishing to enter information sharing arrangements with other payment service providers for the exchange of payment fraud related data as referred to in Article 83(3) of Regulation XXX [PSR], the conclusions of the data protection impact assessment referred to in Article 83(4) of Regulation XXX [PSR] and pursuant to Article 35 of Regulation (EU) 2016/679 and, where applicable, the outcome of the prior consultation of the competent supervisory authority pursuant to Article 36 of that Regulation;

Added(k) for applicant institutions that are subject to the obligations in relation to money laundering and terrorist financing under Directive (EU) 2015/849 of the European Parliament and of the Council and Regulation (EU) 2015/847 of the European Parliament and of the Council, a description of the internal control mechanisms which the applicant has established to comply with that Directive and Regulation;

Added(l) a description of the applicant’s structural organisation, including, where applicable, a description of:

Added▌

Added▌

Added(iii) a description of outsourcing arrangements;

Added(iv) the applicant’s participation in a national or international payment system;

Added(m) the identity of the persons that hold in the applicant, directly or indirectly, qualifying holdings within the meaning of Article 4(1), point (36), of Regulation (EU) No 575/2013, the size of their holdings and evidence of their suitability to ensure the sound and prudent management of the applicant;

Added(n) the identity of directors and other persons responsible for the management of the applicant payment institution and, where relevant:

Added(i) the identity of the persons responsible for the management of the payment services activities of the payment institution;

Added(ii) evidence that the persons responsible for the management of the payment services activities of the payment institution are of good repute and possess appropriate knowledge and experience to perform payment services as determined by the home Member State of the applicant;

Added(o) where applicable, the identity of the statutory auditors and audit firms as defined in Article 2, points 2 and 3, of Directive 2006/43/EC of the European Parliament and of the Council;

Added(p) the applicant’s legal status and articles of association;

Added(q) the address of the applicant’s registered office;

Added(r) an overview of EU jurisdictions where the applicant is submitting or is planning to submit an application for authorisation to operate as a payment institution.

Added(s) a winding-up plan in case of failure, which is adapted to the envisaged size and business model of the applicant.

AddedFor the purposes of the first subparagraph, points (d), (e), (f) and (l), Member States shall ensure that the applicant provides a description of its audit arrangements and of the organisational arrangements it has set up to protect the interests of its users and to ensure continuity and reliability in the performance of payment or electronic money services.

AddedThe security control and mitigation measures referred to in the first subparagraph, point (j), shall indicate how the applicant will ensure a high level of digital operational resilience as required by Chapter II of Regulation (EU) 2022/2554, in particular in relation to technical security and data protection, including for the software and ICT systems used by the applicant or the undertakings to which it outsources its operations.

Added4. Member States shall require undertakings that apply for authorisation to provide payment services as referred to in Annex I, point (6), as a condition of their authorisation, to hold a professional indemnity insurance, covering the territories in which they offer services, or some other comparable guarantee against liability which may, only for the initial authorisation period, include a minimum initial capital of EUR 50 000 to ensure that:

Added(a) they can cover their liabilities as specified in Articles 56, 57, 59, 76, and 78 of Regulation XXX [PSR];

Added(b) they cover the value of any excess, threshold or deductible from the insurance cover or comparable guarantee;

Added(c) they monitor the coverage of the insurance or comparable guarantee on an ongoing basis.

Added5. The EBA shall develop draft regulatory technical standards specifying:

Added(a) the information to be provided to the competent authorities in the application for the authorisation of payment institutions, including the requirements laid down in paragraph 3, points (a), (b), (c), (e) and (g) to (k) and (r);

Added(b) a common assessment methodology for granting authorisation as a payment institution, or registration as an account information service provider or ATM deployer, under this Directive;

Added(c) what is a comparable guarantee, as referred in paragraph 4, first subparagraph, which should be interchangeable with a professional indemnity insurance;

Added(d) the criteria on how to stipulate the minimum monetary amount of the professional indemnity insurance or other comparable guarantee as referred in paragraph 4.

Added6. When developing those draft regulatory technical standards referred to in paragraph 5, the EBA shall take account of the following:

Added(a) the risk profile of the undertaking;

Added(b) whether the undertaking provides other payment services as referred to in Annex I or is engaged in other businesses;

Added(c) the size of the activity of the undertaking;

Added(d) the specific characteristics of comparable guarantees, as referred in paragraph 4, and the criteria for their implementation.

AddedThe EBA shall submit those draft regulatory technical standards referred to in paragraph 5 to the Commission by [OP please insert the date = 1 year after the date of entry into force of this Directive].

AddedPower is delegated to the Commission to adopt the regulatory technical standards in accordance with Article 10 to 14 of Regulation (EU) No 1093/2010.

AddedControl of the shareholding

Added1. Any natural or legal person who has taken a decision to acquire or to further increase, directly or indirectly, a qualifying holding within the meaning of Article 4(1), point (36), of Regulation (EU) No 575/2013 in a payment institution, as a result of which the proportion of the capital or of the voting rights held would reach or exceed 20 %, 30 % or 50 %, or so that the payment institution would become its subsidiary, shall inform the competent authorities of that payment institution in writing of their intention in advance. The same applies to any natural or legal person who has taken a decision to dispose, directly or indirectly, of a qualifying holding, or to reduce its qualifying holding so that the proportion of the capital or of the voting rights held would fall below 20 %, 30 % or 50 %, or so that the payment institution would cease to be its subsidiary.

Added2. The proposed acquirer of a qualifying holding in the payment institution shall inform the competent authority about the size of the intended holding and relevant necessary information as referred to in Article 23(4) of Directive 2013/36/EU.

Added3. Member States shall require that where the influence exercised by a proposed acquirer, as referred to in paragraph 1, is likely to operate to the detriment of the prudent and sound management of the payment institution, the competent authorities shall express their opposition or take other appropriate measures to bring that situation to an end. Such measures may include injunctions, penalties against directors or the persons responsible for the management of the payment institution in question, or the suspension of the exercise of the voting rights attached to the shares held by the shareholders or members of this payment institution.

AddedSimilar measures shall apply to natural or legal persons who fail to comply with the obligation to provide prior information, as laid down in paragraph 2.

Added4. Where a holding as referred to in paragraph 1 is acquired despite the opposition of the competent authorities, Member States shall, regardless of any other penalty to be adopted, provide for the exercise of the corresponding voting rights to be suspended, the nullity of votes cast or the possibility of annulling those votes.

AddedInitial capital

AddedMember States shall require payment institutions to hold, at the time of authorisation, initial capital, comprised of one or more of the items referred to in Article 26, points (1)(a) to (e), of Regulation (EU) No 575/2013 as follows:

Added(a) where the payment institution provides only the payment service referred to in Annex I, point (5), its capital shall at no time be less than EUR 25 000;

Added(b) where the payment institution provides the payment service referred to in Annex I, point (6), its capital shall at no time be less than EUR 50 000;

Added(c) where the payment institution provides any of the payment services referred to in Annex I, points (1) to (4), its capital shall at no time be less than EUR 150 000;

Added(d) where the payment institution provides electronic money services, its capital shall at no time be less than EUR 350 000.

AddedOwn funds

Added1. Member States shall require that the payment institution’s own funds does not fall below the amount of initial capital referred to in Article 5, or the amount of own funds either calculated in accordance with Article 7 for payment institutions that do not offer electronic money services, or calculated in accordance with Article 8 for payment institutions that offer electronic money services, whichever is the highest.

Added2. Member States shall take the necessary measures to prevent the multiple use of elements eligible for own funds where the payment institution belongs to the same group as another payment institution, credit institution, investment firm, asset management company or insurance undertaking. The same shall also apply where a payment institution has a hybrid character and carries out activities other than providing payment or electronic money services.

Added3. Where the conditions laid down in Article 7 of Regulation (EU) No 575/2013 are met, Member States or their competent authorities may choose not to apply Articles 7 or 8 of this Directive, as applicable, to payment institutions which are included in the consolidated supervision of the parent credit institution pursuant to Directive 2013/36/EU.

AddedCalculation of own funds for payment institutions not offering electronic money services

Added1. Notwithstanding the initial capital requirements set out in Article 5, Member States shall require payment institutions, other than payment institutions that either only offer payment initiation services as referred to in Annex I, point (6), or only offer account information services as referred to in Annex I, point (7), or both, and other than payment institutions offering electronic money services, to hold own funds calculated in accordance with paragraph 2 at all times.

Added2. Competent authorities shall require payment institutions to apply, by default, method B as laid down in point b) below. Competent authorities may however decide that, in light of their specific business model, in particular where they only execute a small number of transactions but of a high individual value, payment institutions shall rather apply method A or C. For the purposes of methods A, B and C, the preceding year is to be understood as the full 12-month period prior to the moment of calculation.

Added(a) Method A

AddedThe payment institution’s own funds shall amount to at least 10 % of its fixed overheads of the preceding year. The competent authorities may adjust that requirement in the event of a material change in a payment institution’s business since the preceding year. Where a payment institution has not completed a full year’s business at the date of the calculation, payment institution’s own funds shall amount to at least 10 % of the corresponding fixed overheads as projected in its business plan, unless the competent authorities have required an adjustment to that plan.

Added(b) Method B