+COMMISSION DELEGATED REGULATION (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (Text with EEA relevance)
---+CHAPTER I GENERAL PROVISIONS
------+Article 1 Subject matter
------+Article 2 General authentication requirements
---------+Article 2 1.
---------+Article 2 2.
------+Article 3 Review of the security measures
---------+Article 3 1.
---------+Article 3 2.
---------+Article 3 3.
---+CHAPTER II SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION
------+Article 4 Authentication code
---------+Article 4 1.
---------+Article 4 2.
---------+Article 4 3.
---------+Article 4 4.
------+Article 5 Dynamic linking
---------+Article 5 1.
---------+Article 5 2.
---------+Article 5 3.
------+Article 6 Requirements of the elements categorised as knowledge
---------+Article 6 1.
---------+Article 6 2.
------+Article 7 Requirements of the elements categorised as possession
---------+Article 7 1.
---------+Article 7 2.
------+Article 8 Requirements of devices and software linked to elements categorised as inherence
---------+Article 8 1.
---------+Article 8 2.
------+Article 9 Independence of the elements
---------+Article 9 1.
---------+Article 9 2.
---------+Article 9 3.
---+CHAPTER III EXEMPTIONS FROM STRONG CUSTOMER AUTHENTICATION
------+Article 10 Access to the payment account information directly with the account servicing payment service provider
---------+Article 10 1.
---------+Article 10 2.
------+Article 10a Access to the payment account information through an account information service provider
---------+Article 10a 1.
---------+Article 10a 2.
---------+Article 10a 3.
---------+Article 10a 4.
------+Article 11 Contactless payments at point of sale
------+Article 12 Unattended terminals for transport fares and parking fees
------+Article 13 Trusted beneficiaries
---------+Article 13 1.
---------+Article 13 2.
------+Article 14 Recurring transactions
---------+Article 14 1.
---------+Article 14 2.
------+Article 15 Credit transfers between accounts held by the same natural or legal person
------+Article 16 Low-value transactions
------+Article 17 Secure corporate payment processes and protocols
------+Article 18 Transaction risk analysis
---------+Article 18 1.
---------+Article 18 2.
---------+Article 18 3.
------+Article 19 Calculation of fraud rates
---------+Article 19 1.
---------+Article 19 2.
---------+Article 19 3.
------+Article 20 Cessation of exemptions based on transaction risk analysis
---------+Article 20 1.
---------+Article 20 2.
---------+Article 20 3.
---------+Article 20 4.
------+Article 21 Monitoring
---------+Article 21 1.
---------+Article 21 2.
---+CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
------+Article 22 General requirements
---------+Article 22 1.
---------+Article 22 2.
---------+Article 22 3.
---------+Article 22 4.
------+Article 23 Creation and transmission of credentials
------+Article 24 Association with the payment service user
---------+Article 24 1.
---------+Article 24 2.
------+Article 25 Delivery of credentials, authentication devices and software
---------+Article 25 1.
---------+Article 25 2.
------+Article 26 Renewal of personalised security credentials
------+Article 27 Destruction, deactivation and revocation
---+CHAPTER V COMMON AND SECURE OPEN STANDARDS OF COMMUNICATION
------+Section 1 General requirements for communication
---------+Article 28 Requirements for identification
------------+Article 28 1.
------------+Article 28 2.
---------+Article 29 Traceability
------------+Article 29 1.
------------+Article 29 2.
------+Section 2 Specific requirements for the common and secure open standards of communication
---------+Article 30 General obligations for access interfaces
------------+Article 30 1.
------------+Article 30 2.
------------+Article 30 3.
------------+Article 30 4.
------------+Article 30 4a.
------------+Article 30 5.
------------+Article 30 6.
---------+Article 31 Access interface options
---------+Article 32 Obligations for a dedicated interface
------------+Article 32 1.
------------+Article 32 2.
------------+Article 32 3.
------------+Article 32 4.
---------+Article 33 Contingency measures for a dedicated interface
------------+Article 33 1.
------------+Article 33 2.
------------+Article 33 3.
------------+Article 33 4.
------------+Article 33 5.
------------+Article 33 6.
------------+Article 33 7.
---------+Article 34 Certificates
------------+Article 34 1.
------------+Article 34 2.
------------+Article 34 3.
------------+Article 34 4.
---------+Article 35 Security of communication session
------------+Article 35 1.
------------+Article 35 2.
------------+Article 35 3.
------------+Article 35 4.
------------+Article 35 5.
---------+Article 36 Data exchanges
------------+Article 36 1.
------------+Article 36 2.
------------+Article 36 3.
------------+Article 36 4.
------------+Article 36 5.
---+CHAPTER VI FINAL PROVISIONS
------+Article 37 Review
------+Article 38 Entry into force
---------+Article 38 1.
---------+Article 38 2.
---------+Article 38 3.
---+ANNEX
 English - European Union - Financial Industry - PSD2 -

COMMISSION DELEGATED REGULATION (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (Text with EEA relevance)

COMMISSION DELEGATED REGULATION (EU) 2018/389

of 27 November 2017

supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication

(Text with EEA relevance)

This Regulation shall be binding in its entirety and directly applicable in all Member States.

1. Pregled

,
CHAPTER I GENERAL PROVISIONS CHAPTER I GENERAL PROVISIONS
CHAPTER II SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION CHAPTER II SECURITY MEASURES FOR THE APPLICATION OF STRONG CUSTOMER AUTHENTICATION
CHAPTER III EXEMPTIONS FROM STRONG CUSTOMER AUTHENTICATION CHAPTER III EXEMPTIONS FROM STRONG CUSTOMER AUTHENTICATION
CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
CHAPTER V COMMON AND SECURE OPEN STANDARDS OF COMMUNICATION CHAPTER V COMMON AND SECURE OPEN STANDARDS OF COMMUNICATION
CHAPTER VI FINAL PROVISIONS CHAPTER VI FINAL PROVISIONS
ANNEX



ANNEX



 

Reference fraud rate (%) for:

ETV

Remote electronic card-based payments

Remote electronic credit transfers

EUR 500

0,01

0,005

EUR 250

0,06

0,01

EUR 100

0,13

0,015

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani standardi

2. Ugotovljene zahteve

Zahteve

3. Povezani standardi

Standardi

Povezane zadeve

Povezave
is related to Imported: Delegierte Verordnung (EU) 2018/389 (RTS starke Kundenauthentifizierung und Kommunikation) (CELEX:02018R0389-20230912)