Skip to Navigation
Skip to Content

  • Login

Consumer Electronic Clearing System

Device Life Cycle

The device lifecycle is a framework that has been introduced to ensure EFTPOS devices being used in NZ are secure enough to protect sensitive data from unauthorised use. To maintain a high standard of data security, EFTPOS devices must be registered with Payments NZ before they can be connected to the EFTPOS switching network.

The device types that require approval within CECS are:

  Associated Resources

  pdf.png Device Life Cycle FAQ  (169KB)
  pdf.png Terminal Best Practices  (83KB)
  pdf.png Device Lifecycle Standards  (82KB)
  pdf.png Compromised Terminal Disconnection Plan  (762KB)

  • Pin Entry Devices (PED)
  • Unattended Payment Terminals (UPT)

The lifecycle stages are outlined in the table below. For more information on the device lifecycle and the associated standards, please refer to the associated resources below.

Stage

Lifecycle

Description

1Device registrationInitial approval of a device model for use in NZ that complies with a PCI PTS POI standard.
2No new registrationsThe date Payments NZ will stop registering models of devices that comply with a PCI PTS POI standard; i.e. Payments NZ will decline any application for registration received after the published date.
3No new connectionsThe date from which any new devices of the model can no longer be connected to the EFTPOS network.
4SunsetThe date that devices of the registered models of the device must be disconnected from the EFTPOS network.
5Disconnection due to compromiseProcess for disconnecting registered models from the EFTPOS network if the model experiences a security breach.
Back to top