Translation of "Daily issues identification and quick response process " (English → French) :

2. Each organisation established in a Member State shall, following the identification of actions required to address actual or potential safety deficiencies, implement these actions as quickly as possible and establish a process to monitor implementation and effectiveness of the responses.

5. Each Member State and EASA shall, following the identification of actions required to address actual or potential safety deficiencies, implement these actions as quickly as possible and establish a process to monitor implementation and effectiveness of the responses.

55. Recalls that while the final responsibility for security measures relating to different payment methods cannot lie with customers, they should be informed about security precautions, and financial institutions should be responsible for fraud costs, unless caused by the customer ‘by acting fraudulently or by failing to fulfil one or more of his obligations under Article 56 of the Payment Service Directive with intent or gross negligence’; considers, therefore, that public information campaigns should be encouraged with a view to increasing public awareness and knowledge of digital security issues in particular; calls on the Commissi ...[+++]on, when developing a strategy and instruments for the integration of payment markets by card, internet and mobile phone, to take into account the standards and recommendations of EDPS regarding transparency, identification of the controller/ processor, proportionality and rights of the data subject; considers it important that all payment frauds in SEPA are reported to a centralised site for monitoring, statistics and evaluation, in order to respond quickly to new security threats, and that the main developments should be made public; asks the Commission to extend the concept of privacy by design beyond authentication mechanisms and security safeguards so as to ensure data minimisation, to implement privacy by default settings, to limit the access to individual's information to what is strictly needed to provide the service,- and to implement tools enabling users to better protect their personal data;

55. Recalls that while the final responsibility for security measures relating to different payment methods cannot lie with customers, they should be informed about security precautions, and financial institutions should be responsible for fraud costs, unless caused by the customer ‘by acting fraudulently or by failing to fulfil one or more of his obligations under Article 56 of the Payment Service Directive with intent or gross negligence’; considers, therefore, that public information campaigns should be encouraged with a view to increasing public awareness and knowledge of digital security issues in particular; calls on the Commissi ...[+++]on, when developing a strategy and instruments for the integration of payment markets by card, internet and mobile phone, to take into account the standards and recommendations of EDPS regarding transparency, identification of the controller/ processor, proportionality and rights of the data subject; considers it important that all payment frauds in SEPA are reported to a centralised site for monitoring, statistics and evaluation, in order to respond quickly to new security threats, and that the main developments should be made public; asks the Commission to extend the concept of privacy by design beyond authentication mechanisms and security safeguards so as to ensure data minimisation, to implement privacy by default settings, to limit the access to individual's information to what is strictly needed to provide the service,- and to implement tools enabling users to better protect their personal data;