The European Data Protection Board adopted a letter on behalf of the EDPB Chair addressed to Sophie in’t Veld MEP regarding the revised Payments Services Directive (PSD2 Directive). In its reply to Sophie in’t Veld the EDPB sheds further light on ‘silent party data’ by Third Party Providers, the procedures with regard to giving and withdrawing consent, the Regulatory Technical Standards, the cooperation between banks and the European Commission, EDPS and WP29 and what remains to be done to close any remaining data protection gaps.
The EDPB has replace the Article 29 Working Party. The letter covers:
The EDPB has replace the Article 29 Working Party. The letter covers:
- Legal Framework - The legal framework regarding the protection of personal data in the context of PSD2 is complex and developments in this regard are therefore being monitored by the EDPB.
- Silent party data - Concerning "silent party data", you raised the question whether the processing of personal data of "silent parties" is legitimate when explicit consent for the processing of personal data has (only) been given by another data subject.
- Explicit Consent
- Regulatory Technical Standards
- Position of Banks
- Further Activities