The European Banking Authority launched a consultation on draft Guidelines on major incidents reporting under the Payment Services Directive 2. PSD2 requires payment service providers to notify their national regulator without delay of any major operational or security incident. The national regulator must assess the relevance of the incident to other authorities in its Member State and notify them accordingly. In addition, the national regulator must pass on the details of the incident to the EBA and the European Central Bank and, with them, assess the relevance of the incident to other EU bodies and Member States and notify them accordingly. 

The EBA is responsible for preparing Guidelines addresses to PSPs on the classification of major incidents and on the content, the format, including standard notification templates and the procedures for notifying an incident to their regulator. In addition, the EBA must prepare Guidelines for national regulators on the criteria for assessing the relevance of an incident and the details of the incident report to be shared with other authorities. Both Guidelines must be developed in close cooperation with the ECB. The EBA's consultation paper sets out the proposed Guidelines as developed by the EBA with the ECB. Responses to the consultation are requested by March 7, 2017. 

View the consultation paper.