Explanatory Note on the Regulation on Ensuring Information Security in Payment Systems for Payment System Operators and Payment Service Providers

The Central Bank of the Republic of Uzbekistan approved the Regulation "On Ensuring Information Security in Payment Systems for Payment System Operators and Payment Service Providers" (registered on June 30, 2020, under No. 3268).

The Regulation establishes minimum requirements for ensuring information security in payment systems for payment system operators and payment service providers.

In turn, this document pursues a number of objectives. Specifically,

• defining the necessary tasks for ensuring the information security of information systems and information resources of payment system operators and payment service providers;
• outlining the requirements that payment system operators and payment service providers must implement to ensure information security in the input, transmission, processing, and storage of payments in payment systems;
• preventing unauthorized alteration, leakage, and other negative impacts on the payment data of payment system operators and payment service providers;
• ensuring security and information protection in the provision of remote payment services.

Based on the nature of payment systems, the Regulation serves to develop internal rules for information security.

In particular, this document is of great importance for ensuring that information protection in the payment systems of payment system operators and payment service providers is maintained at the required level. The Regulation entered into force on June 30, 2020.