What changes on 25/07/2023

The text in force from 14/03/2018 compared with the text from 25/07/2023, which includes the changes made by Commission Delegated Regulation (EU) 2022/2360.

Read the act as of 25/07/2023 · other versions:

Chapter I

• amended Article 1 - Subject matter
• amended Article 2 - General authentication requirements
• amended Article 3 - Review of the security measures

Chapter II

• amended Article 4 - Authentication code
• amended Article 5 - Dynamic linking
• amended Article 6 - Requirements of the elements categorised as knowledge
• amended Article 7 - Requirements of the elements categorised as possession
• amended Article 8 - Requirements of devices and software linked to elements categorised as inherence
• amended Article 9 - Independence of the elements

Chapter III

• inserted Article 10a - Access to the payment account information through an account information service provider
• amended Article 10 - Access to the payment account information directly with the account servicing payment service provider
• amended Article 11 - Contactless payments at point of sale
• amended Article 13 - Trusted beneficiaries
• amended Article 14 - Recurring transactions
• amended Article 16 - Low-value transactions
• amended Article 18 - Transaction risk analysis
• amended Article 19 - Calculation of fraud rates
• amended Article 20 - Cessation of exemptions based on transaction risk analysis
• amended Article 21 - Monitoring

Chapter IV

• amended Article 22 - General requirements
• amended Article 24 - Association with the payment service user
• amended Article 25 - Delivery of credentials, authentication devices and software
• amended Article 27 - Destruction, deactivation and revocation

Chapter V › Section 1

• amended Article 28 - Requirements for identification
• amended Article 29 - Traceability

Chapter V › Section 2

• amended Article 30 - General obligations for access interfaces
• amended Article 32 - Obligations for a dedicated interface
• amended Article 33 - Contingency measures for a dedicated interface
• amended Article 34 - Certificates
• amended Article 35 - Security of communication session
• amended Article 36 - Data exchanges

Chapter VI

• amended Article 38 - Entry into force

Outside any heading

• amended Annex 1