- In order to ensure adequate levels of interconnectivity, interoperability and efficiency in relation to the organization of payment systems, Bank Indonesia’s Board of Governors ("BI") has issued Regulation No. 23/15/PADG/2021 on the Implementation of National Standards for Open Application Programming Interface Payments ("Regulation"). The Regulation establishes a new set of standards relating to the operation of Application Programming Interfaces ("API") for payment transactions.
- The National Standards for Open API Payments (Standar Nasional Open API Pembayaran – "SNAP") comprise various technical specifications, operational specifications and implementing guidelines and encompass the following documents: 1) SNAP technical and safety standards, data standards and technical specifications; and 2) Guidelines for the governance of SNAP.
- Open API payment service providers ("Providers") and service users that take the form of payment system providers ("PJP Users") are obliged to implement SNAP-based Open API Payments ("SNAP-API") within Open API payment systems are that currently organized by Providers and PJP Users. Furthermore, Providers are also obliged to ensure that Non-PJP Users cooperate during the implementation of SNAP-API.
- Providers which conduct fund source administration activities through SNAP-API are required to implement authorizations every time that they process payment transactions or once only during the first transaction and which will remain valid for a certain duration (or until it is revoked). In addition, if Providers or PJP Users are intending to access consumer data in order to process transactions through the use of SNAP-API, then they must first secure approvals from the relevant consumers through verifications/authentications of the identities of the relevant parties or validations of access rights.
- During the development of any Open API Payment systems, Providers and PJP Users are required to: 1) Perform tests on SNAP-API testing applications through the relevant SNAP developer’s site; 2) Perform functionality testing; 3) Set procedures and draw up documentation that apply in relation to system development, changes and maintenance; 4) Submit verification requests to the SRO; and 5) Comply with applicable laws and regulations.
- The Regulation has been in force since 16 August 2021.
......
Subscribe to read more legal analysis.
Hukumonline Pro Intelligence
Platform AI hukum terpercaya sebagai solusi komprehensif riset Anda
*Syarat dan ketentuan berlaku