The interplay between the General Data Protection Regulation and the revised Payment Services Directive (PSD2) has been an issue for some time, but is increased enforcement action and the rise of data protection activists something that payments institutions should be alarmed about?