Skip to the text
In this act Article 27 of 39

Article 27 — Destruction, deactivation and revocation

Financial servicesLevel 2RTSPSD2In forceOfficial source

Payment service providers shall ensure that they have effective processes in place to apply each of the following security measures:

27(a)
(a)the secure destruction, deactivation or revocation of the personalised security credentials, authentication devices and software;
Copy link
27(b)
(b)where the payment service provider distributes reusable authentication devices and software, the secure re-use of a device or software is established, documented and implemented before making it available to another payment services user;
Copy link
27(c)
(c)the deactivation or revocation of information related to personalised security credentials stored in the payment service provider's systems and databases and, where relevant, in public repositories.
Copy link

CHAPTER V — COMMON AND SECURE OPEN STANDARDS OF COMMUNICATION

Section 1 — General requirements for communication