In line with the mandate conferred upon it by the revised Payment Services Directive (PSD2), the European Banking Authority on Thursday 27 July published its final guidelines on the classification and notification of major operational or security incidents by payment service providers.
These guidelines, which were drawn up in close collaboration with the European Central Bank on the basis of an evaluation of existing national practices, set out the criteria, thresholds and methodology to be...