Article 71

(1) A Payment Service Provider issuing a Payment Instrument must: (a) Ensure that the Personalized Security Credentials are not accessible to Persons other than the Payment Service User to whom the Payment Instrument has been issued; (b) Ensure that appropriate means are available at all times to enable the Payment Service User to notify the Payment Service Provider of the loss, theft, or unauthorized use of a Payment instrument or exploitation and prevent any use of the Payment Instrument once notification has been made. (2) A Payment Service User should take all reasonable steps to keep safe Personalized Security Credentials relating to a Payment Instrument or a Payment Account Information Service and notify the Payment Service Provider in the agreed manner in The Framework Contract, and without undue delay on becoming aware of the loss, theft, exploitation or unauthorized use of the Payment Instrument.