The device lifecycle is a framework that has been introduced to ensure EFTPOS devices being used in NZ are secure enough to protect sensitive data from unauthorised use. To maintain a high standard of data security, EFTPOS devices must be registered with Payments NZ before they can be connected to the EFTPOS switching network.
The device types that require approval within CECS are:
The lifecycle stages are outlined in the table below. For more information on the device lifecycle and the associated standards, please refer to the associated resources below.
|1||Device registration||Initial approval of a device model for use in NZ that complies with a PCI PTS POI standard.|
|2||No new registrations||The date Payments NZ will stop registering models of devices that comply with a PCI PTS POI standard; i.e. Payments NZ will decline any application for registration received after the published date.|
|3||No new connections||The date from which any new devices of the model can no longer be connected to the EFTPOS network.|
|4||Sunset||The date that devices of the registered models of the device must be disconnected from the EFTPOS network.|
|5||Disconnection due to compromise||Process for disconnecting registered models from the EFTPOS network if the model experiences a security breach.|