Our Consumer Electronic Clearing System (CECS) governs how EFTPOS payments are processed in New Zealand. This includes a device lifecycle framework that ensures EFTPOS devices being used are secure enough to protect sensitive data from unauthorised use. To maintain a high standard of data security, EFTPOS devices must be registered with Payments NZ before they can be connected to the EFTPOS switching network. 

The device types that require approval within CECS are:

  • Pin Entry Devices (PED)
  • Unattended Payment Terminals (UPT)

The lifecycle stages are outlined in the table below. For more information on the device lifecycle and the associated standards, please refer to the associated resources below.

Device lifecycle stages

Stage Lifecycle Description
1 Device registration Initial approval of a device model for use in NZ that complies with a PCI PTS POI standard.
2 No new registrations The date Payments NZ will stop registering models of devices that comply with a PCI PTS POI standard; i.e. Payments NZ will decline any application for registration received after the published date.
3 No new connections The date from which any new devices of the model can no longer be connected to the EFTPOS network.
4 Sunset The date that devices of the registered models of the device must be disconnected from the EFTPOS network.
5 Disconnection due to compromise Process for disconnecting registered models from the EFTPOS network if the model experiences a security breach.
6 Disconnection due to a change to the version of the PTS POI security standard Process for disconnecting registered models from the EFTPOS network when a PCI terminal security standard changes before the model’s sunset date and the model has not been updated to comply with the amended PCI terminal security standard.
Related documents
  • Device Lifecycle FAQs

    Device lifecycle question and answers - all you need to know

    Download pdf  
    208.6 KB
  • Terminal Best Practices

    Recommended best practices for the layout of a keypad on a terminal.

    Download pdf  
    396.5 KB
  • Device Lifecycle Standards

    This is an extract from Appendix 13: CECS: terminal standards which describes how Payments NZ regulates the device lifecycle.

    Download pdf  
    2.1 MB
  • Compromised Terminal Disconnection Plan

    Process for disconnecting a model of terminal from the EFTPOS switching network

    Download pdf  
    761.2 KB