ARCHIVED: This Practice Note has been archived and is not maintained. Introduction This Practice Note outlines the key legal issues regarding security faced by mobile payment service providers as well as those faced by the customer, and how these are being addressed in upcoming European legislation. Mobile payments, as an industry, is rapidly expanding in the UK with the launch of Apple Pay, Google's 'Android Pay' and Samsung's 'Samsung Pay'. The retail payments market has experienced significant technical innovation, with rapid growth in the number of electronic and mobile payments and the emergence of new types of payment services in the market place, which challenges the current framework. This has resulted in payment services legislation, such as the Payment Services Directive (2007/64/EC) (PSD), which was implemented in the UK by the Payment Services Regulations (SI 2009/209) (PSR), becoming outdated in some respects, particularly in relation to security issues, leading to reform of the PSD. The European Parliament adopted the second Payment Services Directive (PSD2) on 8 October 2015. The Council of the European