On January 13, 2018, the Second Payment Services Directive
(PSD2) will enter into force, which also introduces higher security
standards for online payments. In order to clarify the requirements
associated with the implementation of PSD2, the European Commission
was authorized to adopt Regulatory Technical Standards (RTS). After
controversial discussions about the design of these RTS in recent
months, the European Commission has now handed over the final RTS
relating to Strong Customer Authentication and Common and Secure
Communication to the European Parliament for approval on November
27, 2017. Based on the RTS history, it can be expected that the
final version will be released within the next three months. In
this case, the relevant payment service providers have 18 months
after the entry into force of the RTS to implement the relevant
requirements. These include requirements for strong customer
authentication and customer interfaces.
