Search
62 articles found
Payment Systems
The General Data Protection Regulation (GDPR), (EU) 2016/679, is EU law on data protection and privacy. It gives individuals control over their personal data, requires breach notification within 72 hours, and allows fines of up to 20 million euros or 4% of annual revenue.
Merchant & POS
The Personal Data Protection Law was adopted by the Grand National Assembly of Turkey on 24/03/2016 and published in Official Gazette No. 29677 on 07/04/2016. It protects individuals' rights in the processing of personal data and sets the rules that data controllers must follow.
Security
In payment systems, personalized security credentials are information such as the PIN, card/account/e-money details, expiry date and security code (CVV) that identify the payment instrument and its user.
HSM & Security
A Trusted Execution Environment (TEE) is an environment where executed code and accessed data are isolated and protected in terms of confidentiality (no one has access to the data) and integrity (no one can alter the code or its behavior). We may not realize it, but many…
Payment Systems
Digital Account Checking underpins many innovative banking and FinTech services. In most cases, it is performed by Account Information Service Providers, which supply data from customers' online bank accounts to other banks and third-party providers.
Credit Card
The Payment Card Industry Data Security Standard (PCI DSS) is a technical and operational standard created by the PCI Committee, formed by internationally recognized payment brands, to ensure data security in card payment systems.
ATM
The name given to the solution developed by NCR against card skimming and fraud. With SPS, the ATM network is protected from the cost and risks of skimming attacks, which cause over 2 billion dollars in global losses annually.
Payment Systems
PA DSS (Payment Application Data Security Standard) is a global security standard created by the PCI SSC. Even if you do not need to comply with it, PA DSS remains a valuable guide for auditing and building secure payment applications.
HSM & Security
KEK (Key Encryption Key) is an encryption key used to encrypt the DEK (Data Encryption Key) and decrypt the encrypted DEK. The relationship between KEK and DEK: in encryption systems, keys are managed in a layered structure.
Security
“Software-based Mobile Payment Security Requirements” is a document published by EMVCo in April 2020 to guide payment application developers in building secure payment applications. This post summarizes its purpose and who it concerns.
Security
It is an organization aimed at developing, managing, teaching, and raising awareness of security standards in the Card Payments Industry. The PCI Security Standards Council is also an open global forum for data security standards.
Payment Institutions & E-Money
On 7 October 2023, the CBRT amended the Communiqué on Information Systems of Payment and E-Money Institutions and Data Sharing Services of Payment Service Providers, first published on 1 December 2021. Links to the new text, a comparison table and a detailed summary of changes follow.