I'm writing a report for some University coursework, in which I am supposed to analyse the security of an online bank.

I'm trying, with some difficulty, to find any laws/regulations/standards that apply to online banking in the UK that I could reference. Could someone point me towards any legislation or specific acts/standards that might apply to online banking? The report is mostly focused on the technical security aspects, but it would be nice to briefly mention some law or standard that covers online banking.

So far the only relevant materials I've found apply to the US (e.g. the Electronic Fund Transfer Act 1978), but I'm writing specifically about HSBC in the UK.

  • The FCA and the PRA in the UK regulate financial services, but off the top of my head I don't know what specific regulations relate to online banking. Are you primarily concerned with funds transfers? – jimsug Oct 17 '15 at 22:36
  • @jimsug It's quite general, but I guess it's mostly focused on information security and what they do to minimize risk for customers, if that makes sense. I was mostly looking for a quick reference, since the rest of the report is technical. I think those pointers you gave should be a good starting point though, thank you! – IllegalCactus Oct 19 '15 at 9:16
  • What it boils down to is that if there is any fraud, either the bank or the user will be held liable. Which it is depends on how the fraud happened. If it's a flaw in the bank's web site, it's them. If the user told someone their password, it's the user. – user Aug 29 '17 at 16:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.