The AP published its opinion on the draft implementation decree regarding the Payment Services Directive (PSD2). The PSD2 aims to harmonize mobile and internet payment facilities, and to strengthen consumers rights, throughout the EU. In its opinion, the AP stated that the draft implementation decree PSD2 does not sufficiently take into account the GDPR, and that it therefore requires to be revised. For instance, the AP strongly advises that all processing of personal data fall within the scope of the authority of the AP, and not that certain processing fall under the scope of the DNB (De Nederlandsche Bank), as the draft currently suggests.
The full advice can be read here (only available in Dutch).