MasterCard Rules (PDF)

Europe Region Rules
3.8 Authorization Service
2. that Data Subjects may withdraw any consent they previously provided
to the applicable Customer or the Corporation or object at any time on
legitimate grounds to the Processing of Personal Data;
3. about the choices and means that Data Subjects have for limiting the
Processing of Personal Data by the Corporation,
4. that Personal Data may be processed outside the EEA or Switzerland; and
5. about the categories of recipients of Personal Data.
3.6.5.3 Data Subject Access to Personal Data
In accordance with applicable laws and regulations, Customers in the EEA
or Switzerland must develop and implement appropriate procedures for
handling requests by Data Subjects for access to, correction and/or deletion of
Personal Data maintained by the applicable Customer or the Corporation. The
Corporation will cooperate with Customers in responding to such requests and
will provide access to Personal Data maintained by the Corporation to assist
Customers in complying with requests for access to such Personal Data.
If an access request is made directly to the Corporation, Customers must
cooperate with the Corporation in promptly responding to the request.
3.6.5.4 Integrity of Personal Data
Each Customer in the EEA or Switzerland must take reasonable steps to ensure
that Personal Data the Customer provides to the Corporation is reliable for its
intended use and is accurate, complete and current.
3.8 Authorization Service
3.8.3 Stand-In Processing Service
Rule 3.8.3 of Chapter 3, “Customer Obligations,” does not apply if on or before
17 September 2008, the Issuer commenced its use of an alternative on-behalf
authorization service that meets the Corporation’s performance standards.
3.8.4 Issuer Performance Standards
The following additional Standards apply in the Europe Region. Issuers that fail
to meet performance standards may be subject to the assessments set forth in
Rule 3.8.4.3 below and will be mandated to implement the Stand-In Processing
Service. Chip Issuers mandated to implement the Stand-In Processing Service
will also be required to register for M/Chip Cryptogram Validation in Stand-In.
©1969–2012 MasterCard. Proprietary. All rights reserved.
12-12 12 December 2012 • MasterCard Rules