A European Commission official has confirmed that rules demanding “explicit consent” to process customer data under the revised Payment Services Directive (PSD2) do not prevail over EU data protection laws. Paulo Silva, legal officer at the commission, said on Friday that Article 94(2) of the directive governing third-party access to accounts should not be interpreted as lex speciales in relation to the General Data Protection Regulation (GDPR).