Our Consumer Electronic Clearing System governs how EFTPOS payments are processed in New Zealand. This includes a device life cycle framework that ensures EFTPOS devices are secure enough to protect sensitive data from unauthorised use. To maintain a high standard of data security, models of EFTPOS device must be registered on the Payments NZ Device Register before connecting to the EFTPOS switching network.
The device types that require registration are:
- Pin Entry Devices (PED)
- Unattended Payment Terminals (UPT)
The life cycle stages are outlined in the table below. For more information on the device life cycle and the associated standards, please refer to the resources below.
Device life cycle stages
| Stage | Life cycle | Description |
|---|---|---|
| 1 | Device registration | Payments NZ registers a model of device on the Device Register if it conforms with a PCI standard recorded on the Device Dates Register. |
| 2 | No new registrations date | The date that Payments NZ stops registering models of devices that conform with a PCI standard i.e., Payments NZ will decline any application for registration received after the date published on the Device Dates Register. |
| 3 | No new connections date | The date that new devices of all registered models that conform with a PCI standard stop connecting to the EFTPOS switching network for the first time. |
| 4 | Sunset date | The date that devices of all registered models that conform with a PCI standard must disconnect from the EFTPOS switching network. |
| 5 | Disconnection when device compromised | Process for disconnecting devices of a registered model from the EFTPOS network if the model fails to protect sensitive data on a payment instrument from unauthorised use or disclosure in New Zealand or overseas. |
| 6 | Disconnection when PCI standard changes |
Process for disconnecting devices of a registered model that conforms with a PCI standard when: • the PCI standard changes before the sunset date, and • the model is not updated to conform with the amended PCI standard. |
Related documents
Device Life cycle FAQs
Device life cycle questions and answers - all you need to know
Download pdf 289.0 KBTerminal Best Practices
Recommended best practices for the layout of a keypad on a terminal.
Download pdf 396.5 KBCompromised Terminal Disconnection Plan
Process for disconnecting a model of device from the EFTPOS switching network if it fails to protect sensitive data on a payment instrument from unauthorised use or disclosure.
Download pdf 761.2 KBEFTPOS Device Life cycle standards
This is the EFTPOS Device Life cycle standards which specify how Payments NZ regulates the device life cycle.
Download pdf 892.4 KB