Why do only certain online transactions require SCA?

Not all transactions will require Strong Customer Authentication. The regulations governing SCA apply to transactions that the customer has initiated, where the customer's bank and the business they're purchasing from are both in the European Economic Area (EEA). Payments that a business has initiated on the other hand, say for example a recurring debit for a utility service, would not require SCA.