Payment Services Directive 2 (PSD2) imposes several requirements on payment initiation and account information service providers to protect your privacy. 

The payment initiation service provider may only provide information about you to the beneficiary with your explicit consent.

The account information service provider may only access information about the account you have provided with your explicit consent.