On 21 June 2019 the European Banking Authority (EBA) published an Opinion on the elements of (Strong Customer Authetication: SCA).
Besides describing the authentication elements permitted for SCA, the Opinion also addresses potential migration issues due to insufficient preparations by various market operators, such as card schemes and merchants. The Opinion allows competent authorities to allow specific market operators limited additional time to introduce SCA (see paragraph 13 of the Opinion). This leaves the statutory introduction date of the RTS unchanged at 14 September 2019.
We therefore plan to provide limited additional time to market operators that have not yet completed preparations for the implementation of the SCA for credit card transactions. The length of this extension has yet to be determined. In cooperation with the EBA, we strive to achieve a uniform migration for compliance with SCA for credit card transactions.
The EBA has developed questionnaires in preparation for migration to SCA. We have sent these to a number of payment service providers with the aim of identifying potential migration issues. They address preparations needed as of 14 September, the main obstacles identified and the authentication methods currently used. The answers provided serve as a basis for detailing the European preconditions for migrating to SCA, jointly with the EBA. Based on these preconditions, payment service providers that wish to apply phased SCA implementation for credit card transactions will need to prepare migration plans and discuss these with us. We subsequently expect them to implement the migration in accordance with their plans and report on progress.
We will inform payment service providers about the additional time we allow them and the conditions governing the migration plans at a later stage.