On 28 June 2019, the UK Financial Conduct Authority (in response
to an Opinion published by the European Banking Authority)
published a statement on the possible delay of enforcement against
businesses who have not met the Regulatory Technical Standards for
Strong Customer Authentication ("SCA") in relation to
e-commerce card payments by 14 September 2019.
The FCA, recognising that some businesses may have been
struggling to meet the deadline (set under the Second EU Payment
Services Directive, and the Payment Services Regulations), have
said that they will work with industry stakeholders to agree a plan
for implementation by a later date. Although the 14 September 2019
deadline will remain in place generally, if a business does not
meet that deadline, the FCA will not take enforcement action
provided that they are operating in an area which is covered by the
plan and are complying with the plan.