# L_2023227EN.01002101.xml

| 14.9.2023 | EN | Official Journal of the European Union | L 227/21 |
| --- | --- | --- | --- |

14.9.2023

EN

Official Journal of the European Union

L 227/21

---

DECISION OF THE EEA JOINT COMMITTEE No 159/2020

of 23 October 2020

amending Annex IX (Financial services) to the EEA Agreement [2023/1734]

THE EEA JOINT COMMITTEE,

Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98 thereof,

Whereas:

| (1) | Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (1) is to be incorporated into the EEA Agreement. |
| --- | --- |

(1)

Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (1) is to be incorporated into the EEA Agreement.

| (2) | Annex IX to the EEA Agreement should therefore be amended accordingly, |
| --- | --- |

(2)

Annex IX to the EEA Agreement should therefore be amended accordingly,

HAS ADOPTED THIS DECISION:

Article 1

Annex IX to the EEA Agreement shall be amended as follows:

| 1. | The following adaptation is inserted after adaptation (h) in point 16e (Directive (EU) 2015/2366 of the European Parliament and of the Council):






  ‘(i) | In Article 115, as regards the EFTA States, the fourth paragraph shall read as follows:

  “By way of derogation from paragraph 2, the EFTA States shall ensure the application of the security measures referred to in Articles 65, 66, 67 and 97 within 12 months of the date of entry into force of Decision of the EEA Joint Committee No 159/2020 of 23 October 2020.”
  ’ |
| --- | --- | --- |

1.

The following adaptation is inserted after adaptation (h) in point 16e (Directive (EU) 2015/2366 of the European Parliament and of the Council):

‘(i)

In Article 115, as regards the EFTA States, the fourth paragraph shall read as follows:

“By way of derogation from paragraph 2, the EFTA States shall ensure the application of the security measures referred to in Articles 65, 66, 67 and 97 within 12 months of the date of entry into force of Decision of the EEA Joint Committee No 159/2020 of 23 October 2020.”
  ’

| 2. | The following point is inserted after point 16ea (Commission Delegated Regulation (EU) 2017/2055):






  ‘16eb. | 32018 R 0389: Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (OJ L 69, 13.3.2018, p. 23).’ |
| --- | --- | --- |

2.

The following point is inserted after point 16ea (Commission Delegated Regulation (EU) 2017/2055):

‘16eb.

32018 R 0389: Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (OJ L 69, 13.3.2018, p. 23).’

Article 2

The text of Delegated Regulation (EU) 2018/389 in the Icelandic and Norwegian languages, to be published in the EEA Supplement to the Official Journal of the European Union, shall be authentic.

Article 3

This Decision shall enter into force on 24 October 2020, provided that all the notifications under Article 103(1) of the EEA Agreement have been made (*1), or on the day of the entry into force of Decision of the EEA Joint Committee No 165/2019 of 14 June 2019 (2), whichever is the later.

Article 4

This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union.

Done at Brussels, 23 October 2020.

For the EEA Joint Committee

The President

Sabine MONAUNI

---

(1)  
  OJ L 69, 13.3.2018, p. 23.

1

(*1)  No constitutional requirements indicated.

*1

(2)  
  OJ L 291, 10.11.2022, p. 50.

2

---