PISPs and AISPs must keep the access sessions offered by Islamic retail bank licensees as short as possible and they must actively terminate the session as soon as the requested action has been completed.