The Communiqué on the Information Systems of Payment and Electronic Money Institutions and the Data Sharing Services of Payment Service Providers in the Field of Payment Services was published in Official Gazette No. 31676 dated 01.12.2021 and entered into force.
The purpose of this Communiqué is to regulate the procedures and principles regarding the management of the information systems used by payment institutions and electronic money institutions in carrying out their activities, the audit of these systems by authorized independent audit firms, and the data sharing services of payment service providers in the field of payment services.
You can access the communiqué from the link below:
https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=39081&MevzuatTur=9&MevzuatTertip=5
What do data sharing services mean?
The communiqué covers the APIs that allow payment service providers to share account information and initiate payments with the customer's consent. Account information services and payment initiation services are defined as the two main roles in this area.
Customer consent, secure authentication and data minimization are the core principles. Institutions offering these services must run security tests and report incidents.
This framework forms the legal basis for open banking practices in Türkiye.
