You control the access to your accounts. Unless you grant ongoing access to a TPP, you will have to be involved every time the TPP accesses your account.
If you want, you can give an AISP permission to access your payment accounts for a set amount of time or indefinitely. Indefinite means the consent will never expire. During this time they may access your accounts up to four times a day without your involvement. They can check your account activity without you having to log-on as well. To renew this access you need to go through Strong Customer Authentication (SCA) with us every 90 days if you have allowed the TPP to access your accounts indefinitely.
Like AISPs you can also give a CBPII access to carry out a funds check on your account for a set amount of time or indefinitely. During this time the CBPII can access your account until the date you set or you remove their access. You need to go through Strong Customer Authentication (SCA) with us to change this access, but you don’t need to do it every 90 days for a CBPII.
You can take access away from AISPs and CBPIIs through the ‘Shared Account Management’ screen on your online banking profile.
If you are using a PISP, you have to be involved in every transaction when the PISP contacts us on your behalf. A PISP cannot have ongoing access to your account.