◷
New version applies from 14/03/2018.
70 provisions change.
Later versions: 25/07/2023.
Commission Delegated Regulation (EU) 2018/389
14/03/2018 → 25/07/2023: 1 inserted · 0 removed · 32 amended · 0 moved · 1 renamed · 38 unchanged
Position-only shifts inside the same heading are not changes. Amended = the printed text changed.
Preamble
Preamble · 1 unchanged
Recitals
Recitals · 30 unchanged
Recital 1 · Recital 2 · Recital 3 · Recital 4 · Recital 5 · Recital 6 · Recital 7 · Recital 8 · Recital 9 · Recital 10 · Recital 11 · Recital 12 · Recital 13 · Recital 14 · Recital 15 · Recital 16 · Recital 17 · Recital 18 · Recital 19 · Recital 20 · Recital 21 · Recital 22 · Recital 23 · Recital 24 · Recital 25 · Recital 26 · Recital 27 · Recital 28 · Recital 29 · Recital 30
Chapter I - GENERAL PROVISIONS
- amended Article 1 - Subject matter Chapter I
- amended Article 2 - General authentication requirements Chapter I
- amended Article 3 - Review of the security measures Chapter I
Chapter II - SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION
- amended Article 4 - Authentication code Chapter II
- amended Article 5 - Dynamic linking Chapter II
- amended Article 6 - Requirements of the elements categorised as knowledge Chapter II
- amended Article 7 - Requirements of the elements categorised as possession Chapter II
- amended Article 8 - Requirements of devices and software linked to elements categorised as inherence Chapter II
- amended Article 9 - Independence of the elements Chapter II
Chapter III - EXEMPTIONS FROM STRONG CUSTOMER AUTHENTICATION
- amendedrenamed Article 10 - Access to the payment account information directly with the account servicing payment service provider Chapter III was “Article 10 - Payment account information”
- inserted Article 10a - Access to the payment account information through an account information service provider Chapter III
- amended Article 11 - Contactless payments at point of sale Chapter III
- amended Article 13 - Trusted beneficiaries Chapter III
- amended Article 14 - Recurring transactions Chapter III
- amended Article 16 - Low-value transactions Chapter III
- amended Article 18 - Transaction risk analysis Chapter III
- amended Article 19 - Calculation of fraud rates Chapter III
- amended Article 20 - Cessation of exemptions based on transaction risk analysis Chapter III
- amended Article 21 - Monitoring Chapter III
Chapter III · 3 unchanged
Chapter IV - CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
- amended Article 22 - General requirements Chapter IV
- amended Article 24 - Association with the payment service user Chapter IV
- amended Article 25 - Delivery of credentials, authentication devices and software Chapter IV
- amended Article 27 - Destruction, deactivation and revocation Chapter IV
Chapter IV · 2 unchanged
Chapter V - COMMON AND SECURE OPEN STANDARDS OF COMMUNICATION
- amended Article 28 - Requirements for identification Chapter V › Section 1
- amended Article 29 - Traceability Chapter V › Section 1
- amended Article 30 - General obligations for access interfaces Chapter V › Section 2
- amended Article 32 - Obligations for a dedicated interface Chapter V › Section 2
- amended Article 33 - Contingency measures for a dedicated interface Chapter V › Section 2
- amended Article 34 - Certificates Chapter V › Section 2
- amended Article 35 - Security of communication session Chapter V › Section 2
- amended Article 36 - Data exchanges Chapter V › Section 2
Chapter V · 1 unchanged
Chapter VI - FINAL PROVISIONS
- amended Article 38 - Entry into force Chapter VI
Chapter VI · 1 unchanged
Annexes
- amended Annex 1