The European Banking Authority (EBA) and European Central Bank (ECB) are stepping up their cooperation to increase the security of retail payments. The two institutions have agreed to use as a basis for their cooperation, the technical work developed in the European Forum for the Security of Retail Payments (SecuRe Pay), a voluntary cooperative initiative between relevant authorities from the European Economic Area (EEA) that aims at facilitating knowledge and understanding of issues related to the security of electronic retail payment services.
SecuRe Pay will work/function as a common basis for both the Eurosystem (the ECB plus the national central banks of the euro area) standards for the oversight of payment systems and retail payment instruments, and for the EBA's regulatory and supervisory requirements for payment services across the entire European Union (EU). The ECB and EBA have agreed to coordinate and further enhance their cooperation through SecuRe Pay, in light of the fact that the European System of Central Banks (which includes all EU central banks) is tasked with promoting the smooth operation of payment systems and that the regulation of payments services falls into the EBA's scope of action, with security-related mandates in the context of the revision to the EU Payment Services Directive (PSD2).
As a first step of this cooperation, the EBA has published today a consultation paper on draft EBA Guidelines on the security of internet payments, which are based on the SecuRe Pay recommendations. This strengthens the legal basis for the implementation of the harmonised oversight and supervisory policies on retail payments across the EU / EEA. In addition, any procedures and decisions taken by central banks in their oversight function for retail payment systems and payment instruments continue to apply.