# PSR Article 49 — Authorisation

Textual state: amended_substantial. 108 words changed; 1 paragraph added

- Current text: Council final compromise text (Council document 8221/26) — not yet law.
- Compared against: COM(2023) 367 final — superseded.
- Classification is mechanical; method: https://paymentslaw.eu/method/
- Editorial review state: not_assessed. Markers are curated and selective, not a complete assessment.

Word-level diff, proposal → compromise: `{+text+}` was inserted, `[-text-]` was deleted.

## Paragraph 1

1. A payment transaction or a series of payment transactions shall be authorised only if the payer has given its [-permission -]{+consent +}for the execution of the payment transaction. A payment transaction may be authorised by the payer prior to or, if agreed between the payer and the account servicing payment service provider, after the execution of the payment transaction.

## New paragraph 1a

{+1a. A payment transaction shall not be deemed to be authorised where the transaction was initiated or modified by a third party who is acting without the consent of the payment service user, including by using the personalised security credentials of the payment service user fraudulently obtained.+}

## Paragraph 2

2. Access to a payment account for the purpose of account information services or payment initiation services by payment service providers shall be authorised only if the payment service user has given its [-permission -]{+consent +}to the account information services provider or, respectively, to the payment initiation service provider, to access the payment account and the relevant data in that account.

## Paragraph 3

3. In the absence of [-permission, -]{+consent , +}a payment transaction or access to a payment account by an account information service provider or a payment initiation service provider shall be considered to be unauthorised.

## Paragraph 4

4. Account servicing payment service providers shall not verify the [-permission -]{+consent +}given by the payment service user to the account information service provider or payment initiation service provider.

## Paragraph 5

5. The [-permission -]{+consent +}referred to in paragraphs 1 and 2 shall be expressed in the form agreed between the payer and the relevant payment service provider. [-Permission -]{+Consent +}to execute a payment transaction may also be expressed via the payee or the payment initiation service provider.

## Paragraph 6

6. The procedure for giving [-permission -]{+consent +}shall be agreed between the payer and the relevant payment service provider.

## Paragraph 7

7. The payment service user may withdraw [-permission -]{+consent +}to execute a payment transaction or to access a payment account for the purpose of payment initiation services [-or account information services may be withdrawn by -]{+at any time, but no later than at +}the {+moment of irrevocability in accordance with Article 66. The +}payment service user {+may withdraw consent to access a payment account for the purpose of account information services +}at any time. The payment service user may also withdraw [-permission -]{+consent +}to execute a series of payment transactions, in which case any future payment transaction {+in that series +}shall be considered to be unauthorised.