Section 98(1)

Each payment service provider must establish a framework with appropriate mitigation measures and control mechanisms to manage the operational and security risks, relating to the payment services it provides. As part of that framework, the payment service provider must establish and maintain effective incident management procedures, including for the detection and classification of major operational and security incidents.

← 98 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04