PISPs and AISPs must keep the access sessions offered by conventional retail bank licensees as short as possible and they must actively terminate the session as soon as the requested action has been completed.