Decision of the EEA Joint Committee No 159/2020 of 23 October 2020 amending Annex IX (Financial services) to the EEA Agreement [2023/1734]
Date: 2020-10-23
Institutions: EEA Joint Committee
Subjects: European Economic Area, consumer protection, electronic banking, electronic money, financial legislation, financial services, information security, payment system, provision of services, revision of an agreement, safety standard, technical standard




L_2023227EN.01002101.xml










14.9.2023   


EN


Official Journal of the European Union


L 227/21








            DECISION OF THE EEA JOINT COMMITTEE No 159/2020
of 23 October 2020
         
amending Annex IX (Financial services) to the EEA Agreement [2023/1734]


THE EEA JOINT COMMITTEE,

Having regard to the Agreement on the European Economic Area (“the EEA Agreement”), and in particular Article 98 thereof,

Whereas:







(1)


Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (1) is to be incorporated into the EEA Agreement.












(2)


Annex IX to the EEA Agreement should therefore be amended accordingly,





HAS ADOPTED THIS DECISION:



Article 1
Annex IX to the EEA Agreement shall be amended as follows:






1.


The following adaptation is inserted after adaptation (h) in point 16e (Directive (EU) 2015/2366 of the European Parliament and of the Council):






‘(i)


In Article 115, as regards the EFTA States, the fourth paragraph shall read as follows:

                                             “By way of derogation from paragraph 2, the EFTA States shall ensure the application of the security measures referred to in Articles 65, 66, 67 and 97 within 12 months of the date of entry into force of Decision of the EEA Joint Committee No 159/2020 of 23 October 2020.”
                                             ’
                                          














2.


The following point is inserted after point 16ea (Commission Delegated Regulation (EU) 2017/2055):






‘16eb.



32018 R 0389: Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (OJ L 69, 13.3.2018, p. 23).’










Article 2
The text of Delegated Regulation (EU) 2018/389 in the Icelandic and Norwegian languages, to be published in the EEA Supplement to the Official Journal of the European Union, shall be authentic.


Article 3
This Decision shall enter into force on 24 October 2020, provided that all the notifications under Article 103(1) of the EEA Agreement have been made (*1), or on the day of the entry into force of Decision of the EEA Joint Committee No 165/2019 of 14 June 2019 (2), whichever is the later.


Article 4
This Decision shall be published in the EEA Section of, and in the EEA Supplement to, the Official Journal of the European Union.




Done at Brussels, 23 October 2020.


For the EEA Joint Committee


The President

Sabine MONAUNI
            





(1)  
            OJ L 69, 13.3.2018, p. 23.

(*1)  No constitutional requirements indicated.

(2)  
            OJ L 291, 10.11.2022, p. 50.