If banks get it right, PSD2 can help banks retain their large customer base by offering newer, practical services their customers today expect. GDPR could mean a world of new opportunities for banks, like strengthening customer trust, delivering greater customer satisfaction and enhancing brand image. Only well-planned and proactive preparation with the right tools will make the difference between the success and failure.
However, aside from PSD2 and GDPR seeming to be contradictory, what constitutes sensitive payment data is vague. This creates an interpretation challenge for banks. Knowing what data is extremely sensitive and the extent of customers’ contest will become crucial. Questions arise, such as: for how long has the customer given his consent? To what data does it extend? Which party should obtain customer consent? More importantly, when customer information is exposed, dissected and analysed, how does one remain compliant to GDPR’s strict privacy rules?