(6)Where the payment service user directly accesses the account information, payment service providers should continue to be allowed to choose whether to apply strong customer authentication. This is because in such cases no particular issues have been observed requiring an amendment of the exemption laid down in Article 10 of Delegated Regulation (EU) 2018/389, contrary to the case of access through an account information service provider.