{
  "object_type": "agent_pack",
  "schema_version": 1,
  "id": "agent-pack:eu:psd2",
  "act": "psd2",
  "count": 4,
  "pack_hash": "05d0851ddbdf7a4e8a9be40903fa878031f1da858648b03030c74f51cd5dfd4b",
  "usage": "Use each card directly in an answer: applies, risk, do, deadline, authority, source. Follow next_questions for the user's likely follow-up. Missing facts are not_in_register. Not legal advice.",
  "cards": [
    {
      "id": "card:eu:article:psd2--art-73",
      "applies": [
        "payment-service-provider: Refund the payer for an unauthorised payment transaction."
      ],
      "risk": "medium",
      "do": [
        "Refund the payer for an unauthorised payment transaction."
      ],
      "deadline": "Refund immediately, and in any event no later than by the end of the following business day after noting or being notified of the unauthorised transaction (Art. 73(1)). Not required where the provider has reasonable grounds for suspecting fraud and communicates them to the national authority in writing.",
      "authority": [
        "Competent national authority"
      ],
      "source": "https://eur-lex.europa.eu/eli/dir/2015/2366/oj",
      "core_hash": "eb1742a38796c025ece018a8db5523a8d5ab507408cbbe5088cc1fe8457af889",
      "next": [
        "obligation:eu:psd2-art-73-payment-service-provider",
        "sanction:eu:psd2-art-103",
        "authority:eu:competent-national-authority",
        "eu:c-287-19",
        "card:eu:article:psd2--art-95"
      ],
      "next_questions": [
        {
          "q": "What does Article 95 PSD2 require?",
          "card": "card:eu:article:psd2--art-95"
        },
        {
          "q": "What does Article 96 PSD2 require?",
          "card": "card:eu:article:psd2--art-96"
        },
        {
          "q": "What does Article 97 PSD2 require?",
          "card": "card:eu:article:psd2--art-97"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:psd2--art-95",
      "applies": [
        "payment-service-provider: Manage operational and security risks of payment services."
      ],
      "risk": "medium",
      "do": [
        "Manage operational and security risks of payment services."
      ],
      "deadline": "not_in_register",
      "authority": [
        "Competent national authority"
      ],
      "source": "https://eur-lex.europa.eu/eli/dir/2015/2366/oj",
      "core_hash": "91e38c4d8dedb94edcc529b3b5667e8e55faba7d86fc868c90e7c8e71adc239f",
      "next": [
        "obligation:eu:psd2-art-95-payment-service-provider",
        "sanction:eu:psd2-art-103",
        "authority:eu:competent-national-authority",
        "card:eu:article:psd2--art-73",
        "card:eu:article:psd2--art-96"
      ],
      "next_questions": [
        {
          "q": "What does Article 73 PSD2 require?",
          "card": "card:eu:article:psd2--art-73"
        },
        {
          "q": "What does Article 96 PSD2 require?",
          "card": "card:eu:article:psd2--art-96"
        },
        {
          "q": "What does Article 97 PSD2 require?",
          "card": "card:eu:article:psd2--art-97"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:psd2--art-96",
      "applies": [
        "payment-service-provider: Report major operational or security incidents to the competent authority."
      ],
      "risk": "medium",
      "do": [
        "Report major operational or security incidents to the competent authority."
      ],
      "deadline": "not_in_register",
      "authority": [
        "Competent national authority"
      ],
      "source": "https://eur-lex.europa.eu/eli/dir/2015/2366/oj",
      "core_hash": "4fe1a7b4a976f19844716a2a2977dd17ef74a87b305dcf6c1be6cb1d73c401b4",
      "next": [
        "obligation:eu:psd2-art-96-payment-service-provider",
        "sanction:eu:psd2-art-103",
        "authority:eu:competent-national-authority",
        "card:eu:article:psd2--art-73",
        "card:eu:article:psd2--art-95"
      ],
      "next_questions": [
        {
          "q": "What does Article 73 PSD2 require?",
          "card": "card:eu:article:psd2--art-73"
        },
        {
          "q": "What does Article 95 PSD2 require?",
          "card": "card:eu:article:psd2--art-95"
        },
        {
          "q": "What does Article 97 PSD2 require?",
          "card": "card:eu:article:psd2--art-97"
        }
      ],
      "attribution": "Source: NovaCopilot"
    },
    {
      "id": "card:eu:article:psd2--art-97",
      "applies": [
        "payment-service-provider: Apply strong customer authentication."
      ],
      "risk": "medium",
      "do": [
        "Apply strong customer authentication."
      ],
      "deadline": "not_in_register",
      "authority": [
        "Competent national authority"
      ],
      "source": "https://eur-lex.europa.eu/eli/dir/2015/2366/oj",
      "core_hash": "4457121087f1188e8debe691fb6f41abaa5794116bfd8db41e12b2b9ed9b7c67",
      "next": [
        "obligation:eu:psd2-art-97-payment-service-provider",
        "sanction:eu:psd2-art-103",
        "authority:eu:competent-national-authority",
        "eu:c-287-19",
        "card:eu:article:psd2--art-73"
      ],
      "next_questions": [
        {
          "q": "What does Article 73 PSD2 require?",
          "card": "card:eu:article:psd2--art-73"
        },
        {
          "q": "What does Article 95 PSD2 require?",
          "card": "card:eu:article:psd2--art-95"
        },
        {
          "q": "What does Article 96 PSD2 require?",
          "card": "card:eu:article:psd2--art-96"
        }
      ],
      "attribution": "Source: NovaCopilot"
    }
  ],
  "index": "/api/public/v1/agent-pack",
  "concept": "/api/public/v1/agent",
  "attribution": "Source: NovaCopilot",
  "access_class": "decision",
  "access_view": "public"
}