<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":null,"gaps":[],"covered":[],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/definitions/psd2/sensitive-payment-data","url":"https://www.headlesslaw.com/definitions/psd2/sensitive-payment-data","title":"sensitive payment data","family":"definition","work_id":null,"status":"in_force","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"PSD2 Article 4, point (32) · Consolidated version of 17 January 2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117","valid_from":null,"valid_until":null,"revision":null,"content_id":null,"change_date":null,"nearest_versions":[],"first_text_date":null,"correction_applies":false,"versions":[],"version_url":null,"revision_url":null,"versions_url":null,"relations_url":null,"source_line":null,"attribution":null}} -->
---
title: "sensitive payment data"
type: definition
status: Published
source: "PSD2 Article 4, point (32)"
defined_term: "sensitive payment data"
source_regulation: "PSD2"
source_reference: "Article 4, point (32)"
source_node: "eu.psd2.article.4.subparagraph.1.point.32"
cross_regime_auto_link: false
inline_links: pending
text_version: "Consolidated version of 17 January 2025"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · PSD2 Article 4, point (32) · Consolidated version of 17 January 2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117)*

## Definition

> **(32)** ‘**sensitive payment data**’ means data, including personalised security credentials which can be used to carry out fraud. For the activities of payment initiation service providers and account information service providers, the name of the account owner and the account number do not constitute sensitive payment data;

## Source

[PSD2, Article 4, point (32)](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02015L2366-20250117).