Conformité

PSD2 is an EU directive designed to regulate payment services and encourage innovation in the financial sector. It applies to banks, payment service providers (PSPs), and any company handling financial data. For mobile applications offering payment services such as banking apps, mobile wallets, and shopping apps with payment features PSD2 mandates strong customer authentication and secure data transmission.

PSD2 is an EU directive designed to regulate payment services and encourage innovation in the financial sector. It applies to banks, payment service providers (PSPs), and any company handling financial data. For mobile applications offering payment services such as banking apps, mobile wallets, and shopping apps with payment features PSD2 mandates strong customer authentication and secure data transmission.

PSD2 is an EU directive designed to regulate payment services and encourage innovation in the financial sector. It applies to banks, payment service providers (PSPs), and any company handling financial data. For mobile applications offering payment services such as banking apps, mobile wallets, and shopping apps with payment features PSD2 mandates strong customer authentication and secure data transmission.

PSD2 is an EU directive designed to regulate payment services and encourage innovation in the financial sector. It applies to banks, payment service providers (PSPs), and any company handling financial data. For mobile applications offering payment services such as banking apps, mobile wallets, and shopping apps with payment features PSD2 mandates strong customer authentication and secure data transmission.

The DPA is the United Kingdom’s data protection legislation. After Brexit, it replaced the GDPR in the UK and largely mirrors its principles. Mobile data processors and controllers operating in the UK must comply with the DPA to ensure the lawful and secure processing of personal data. This law can lead to fines in case of non-compliance. For example, the credit reporting agency Equifax was fined £500,000 over its 2017 data breach by the UK Information Commissioner’s Office.

DORA is an EU regulation aimed at ensuring the financial sector can remain resilient in the face of major operational disruptions. It sets technical standards for all financial entities including banks, insurers, and asset managers regarding their digital infrastructure and risk management. Under DORA, financial institutions must establish strong IT risk management systems, define incident response mechanisms, and implement application testing and third-party risk monitoring. Even software components sourced from external libraries remain the company’s responsibility. DORA requirements vary based on the entity’s size, risk profile, and services. Critical IT third-party providers are subject to enhanced oversight by European Supervisory Authorities.