1. What's new?

• Added data cluster permissions requirements to Customer Data.

• Added example user journey of an LFI acting as a TPP and ingesting LFI data to Customer Data.

• Added new motor insurance properties, structure, data clusters to Motor Insurance Data Sharing.

• Added Event Notifications page to provide guidance on supported events emitted to TPP Webhooks.

• Added new pagePay Request (PR) enabled by Open Finance with example of Pay Request functionality enabled by Open Finance

• Added UAE PASS option to the CAAP onboarding Centralized Authentication and Authorization (Federated) | 2. CAAP Onboarding and Linking the First LFI

• Added example journey for Payments using Delegated Authentication Payments with Delegated Authentication | 8. Wallet Use Case

• Added Data Retention Guidelines https://openfinanceuae.atlassian.net/wiki/x/aAs8Bw

• Added business rules for Shari’ ah ComplianceCommon Rules and Guidelines | 22. Shari’ah compliance of TPP

2. What’s changed?

• Insurance API updated to include revised examples and guidance on retrieving customer payment details.

• Insurance API - OpenAPI Documentation updated to include new motor insurance properties, structure, data clusters, and permissions.

• TPP Consent Management Interfaces | 4 Consent Pause Journey Updated Consent Pause and Reactivation journeys

• Bulk and Batch Payments | Payment Status Update Payment Status information updated for Bulk and Batch Payments

• Availability, Performance and Usage Benchmarks updated to define OFP vs LFI responsibilities.

• Common Rules and Guidelines | 5. Payer(Debtor) Reference updated Debtor and Creditor reference rules

• https://openfinanceuae.atlassian.net/wiki/x/wws8Bw Update limits and Constants related to Multi Payments

• Updated IdentificationType to SchemeName to align with ISO20022

• Removed namespace for enumerations “UAEOF.” as there is no need for name-spacing in the UAE ecosystem

• https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121373898 updates including:

  • Updated Status enumeration for the File Payments endpoint /file-payments/{PaymentId} to only Received and Rejected

  • Updated PayerReference to CreditorReference, and BeneficiaryReference to DebtorReference to align with ISO20022

  • Add regular expressions that define required data for CreditorReference and DebtorReference to support structured statement narratives.

  • Removed the MobileNumber from the DebtorAccount and CreditorAccount - as is not required to initiate a payment

  • Clarified expectations of the x-idempotency-key behaviour - to be idempotent for 24 hours

  • Added the JSON Web Signature in the ConfirmationOfPayeeResponse for the BeneficiaryIndicators - so that the LFI can verify the Confirmation Of Payee check

  • Updated AuthorizationExpirationTimeWindow to AuthorizationExpirationDateTime to simplify implementation

  • Updated AcceptedAuthorizationType from an enumeration of Single, Multi, or Both to be a flag to represent if a Single Authorization flow is requested (IsSingleAuthorization)

  • Moved all head operations to get and refactored response to provide a JSON payload rather than a Location header to ensure behaviour is idiomatic.

• All API description sequence diagrams have been moved to the API Hub Documentation.

• https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121373124 updates:

  • Fixed Permissions property by move from a single value to an array.

  • Added new Insurance data clusters to the Insurance Rich Authorization Request.

  • Refactored re-consent objects to only include the Property ConsentId for Bank Data Sharing and Insurance.

• Updates in the https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121375683 page to remove unused definitions and separate Bank Channel limits for Open Finance Standard definitions.

• Updates in the https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121375612 to align Business Rules with the API specifications.

• Changed https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121375281 and https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1rc1/pages/121375310:

  • Use ISO 20022 properties for account details.

  • Remove support for domestic account numbers and bank codes.

3. What's to come?