Passage 2

The data a bank has stored on its servers is more valuable than the gold in its vaults.Banks enjoy a monopoly over data that has helped them get away with poor services and fend off competitors.In Europe,at least,that is all about to change with a new set of regulations,named PSD2.

The rules will compel banks to share data easily with licensed third parties.Bankers in Europe complain that their profits and customer relationships are under threat.However,opening up banks,and the data they store,is good for consumers and competition.New providers will be better placed to offer all sorts of innovative services,such as a one-click option to put unspent monthly income into a pension plan.

Nevertheless.some concerns about PSD2 are legitimate.In particular,it is reasonable to wonder about the privacy and security implications of sensitive financial data being shared with third parties.But banks themselves are hardly invulnerable to cyber attack(网络攻击).And the solutions that the European regulators propose to deal with these worries look promising.Third parties that want to use bank data will need to convince national regulators that their data defenses are solid and are subject to annual regulatory inspections.

The gap between writing rules and implementing them is always large.First,consent from customers to provide access to their bank data must be gained explicitly,and the purposes of the data use should be clearly explained.Second,regulators must be very tough both in ensuring that banks open up their infrastructure and in withdrawing the licenses of third parties that break the rules.Third,regulators must also be flexible enough to allow for changes as the market evolves.Since the new entrants will not be licensed to engage in riskier financial activities—such as lending money—it makes sense to regulate them with a lighter touch.But if some Fintech providers do end up becoming systemically important,higher standards of oversight might be necessary

Which of the following is true in order to successfully implement PSD2 (　　).