This policy document outlines the new requirements for managing technology risks by payment services regulatees (PSRs). It aims to consolidate the technology requirements within the payment sector into a single policy document, primarily for the approved issuers of electronic money (EMI), registered merchant acquirers (MA), and money services businesses (MSB).

The key objectives of the policy document are as follows:

1. Introduce proportionate regulations based on tiering given PSRs’ various sizes and complexity;
2. Augment PSRs’ resilience by elevating requirements to support system stability and reliability;
3. Elevate measures to enhance cyber security and data protection;
4. Strengthen the security of digital services through stronger fraud detection, monitoring and customer empowerment; and
5. Facilitate secure and responsible adoption of technology advancement and new innovation.

Issuance Date
12 March 2026

Effective Date
12 March 2027

Issuing Department
Payment Services Oversight Department

Documents

• Technology Requirements for Payment Services Regulatees Policy Document