Compliance
      Back to home
      1. Help Centre
      2. EFTPOS
      3. Compliance

      EFTPOS terminal lifecycle dates

      Learn about the lifecycle of EFTPOS terminals from registration to disconnection. Find out key dates and actions for both PIN Entry Devices (PEDs) and Unattended Payment Terminals (UPTs) across different PCI standards.

      Each payment device or software version introduced to the market follows a specific lifecycle and is designated a sunset date. The standards and version identifiers are established by the PCI Security Standards Council. In New Zealand, Payments New Zealand applies this framework and defines the sunset dates as the governing body responsible for the country's payment system.

      At EFTPOS NZ, we are dedicated to simplifying payments for our customers. That's why if you lease a terminal from us we take the initiative to upgrade your payment solution proactively, guaranteeing uninterrupted compliance. Rest easy, as compliance and upgrades are seamlessly handled throughout your Eftpos NZ subscription.

      Lifecycle Stages

      The lifecycle of each terminal model is categorised into several key stages:

      1. Device Registration: Initial approval for a device model compliant with PCI PTS POI standard.
      2. No New Registrations: Cessation of new device model registrations complying with PCI PTS POI standard.
      3. No New Connections: New models of the device can no longer be connected to the EFTPOS network.
      4. Sunset: Terminals of the registered model must be disconnected from the EFTPOS network.
      5. Disconnection Due to Compromise: Process for disconnecting compromised models from the EFTPOS network.
      6. Disconnection Due to Standard Change: Process for disconnecting models when the PCI terminal security standard changes before the model's sunset date and it's not updated accordingly.

      Lifecycle Dates: PEDs and UPTs

      The device lifecycle includes two primary types:

      • Pin Entry Devices (PED)
      • Unattended Payment Terminals (UPT)

      Terminal Type

      PCI Standard

      No New Registrations Date

      No New Connections Date

      Sunset Date

      Pin Entry Devices (PEDs)

      Scheme PED security requirements (before PCI)

      N/A

      N/A

      1/7/14

       

      PCI 1.x

      N/A
      (registration stopped on 1/4/2010)

      N/A
      (new connections stopped on 30/4/2014)

      N/A
      (disconnection was required on and from 30/4/2018)

       

      PCI 2.x

      N/A
      (registration stopped on 30/4/2014)

      N/A
      (new connections stopped on 30/4/2017)

      N/A
      (disconnection was required on and from 30/04/2020)

       

      PCI 3.x

      N/A
      (registration stopped on 30/4/2017)

      N/A
      (new connections stopped 30/4/2021)

      30/06/24
      (extended from 31/10/2023)

      Temporary exclusions issued for 30/09/2024 and 31/03/25

       

      PCI 4.x

      N/A
      (registration stopped on 30/4/2020)

      30/4/2024
      (extended from 30/4/23)

      30/4/2026

       

      PCI 5.x

      30/4/23

      30/4/26

      30/4/29

       

      PCI 6.x

      30/4/27

      30/4/30

      30/4/33

      Unattended Payment Terminals (UPTs)

      PCI 1.x

      N/A
      (registration stopped on 30/4/2014)

      N/A
      (new connections stopped on 30/4/2014)

      N/A
      (disconnection was required from 30/4/2018)

       

      PCI 3.x

      N/A
      (registration stopped on 30/4/2017)

      N/A
      (new connections stopped 30/4/2021)

      30/06/24
      (extended from 31/10/2023)

       

      UPT PCI 5.x

      30/4/23

      30/4/26

      30/4/29

       

      UPT PCI 6.x

      30/4/27

      30/4/30

      30/4/33