PCI Watch

Tracking changes across the Payment Card Industry

CTA Bulletin nº 42: CPA Card Approval Process Update

v1.0 Type Approval Bulletins
Contact Card

EMV® Card and Mobile Type Approval Bulletin No. 042 First Edition, February 2025 CPA Card Approval Process Update This Approval Bulletin No. 42 describes updates to the EMV® CPA Card Type Approval Process

Applicability

This Approval Bulletin applies to the CPA Card Type Approval Process.

Related Documents

  • EMV Card Type Approval – CPA Level 1 & 2 - Administrative Process, version 2.8
  • Implementation Conformance Statement (ICS), version 1.0.o
  • CPA L1 and L2 Card Image Requirements, version 1.0.o
  • CPA Request for Approval template, January 2025
  • Change Request template, version 1.1
  • EMV Approval Bulletin No. 14, CPA Regression, Tenth Edition, February 2025
  • EMV Approval Bulletin No. 36, First Edition, July 2020
  • EMV Approval Bulletin No. 31, Thirteenth Edition, January 2025

Effective Date

March 1st 2025

Description

The CPA Card Approval process is updated to introduce various changes described below:

  • Admin Process version 2.8.
  • Deprecation of the IC Electrical Compliance Label Process and deprecation of the possibility to do Level 1 evaluation through an audit and/or in a non EMVCo laboratory as already announced in Approval Bulletin No. 36, first edition.
  • Clarification of the eligibility to reduced fee and the testing expected in case of multiprotocol card.
  • Clarification of the applicable rules in case of multiple laboratories testing a product.
  • Rules for business review form delivery during registration.
  • Clarification of the ATR requirements when submitting a product for approval.
  • Option to use different samples for electrical and protocol testing.
  • ICS validity extended to 6 months and approval completion before the expiration of the ICS.
  • Clarification that a test report is valid for 90 days.
  • Description and clarification of the renewal process.
  • Description and clarification of the derivative and change process. countries.
  • CPA ICS 1.0.o.
  • Removal of the list of supported bulletins and addition of the version of the supported EMV specifications.
  • Removal of questions A.5.6 and A.5.7 about electrical testing.
  • Clarification of the ATR expectations in L1P.1.1.
  • Addition of questions L2.0.1a and L2.0.1b about SCP02 and SCP03.
  • CPA Test Plan version 1.0.o.
  • Few maintenance/clarification updates on test cases 2DA.028.00, 2DA.029.00, 2DA.030.00, 2DA.031.00, 2DD.002.00, 2DD.004.00, 2DF.075.02, 2DF.075.03, 2DF.080.03, 2DF.080.04, 2DF.080.05, 2DF.130.02, 2DF.130.03, 2DG.024.02, 2DG.108.05, 2DG.108.06.
  • Image changed to B25 in 2DD.004.00.
  • Test 2DD.005.00 removed.
  • Support of EMV Card Personalization Specification v2.0
  • CPA Card Image Requirements version 1.0.o.
  • New image A77, D11, D15, D16, D17, D18.
  • B4 equivalence with card image A17.1 replaced by B5.
  • Clarification/update of images B25, B78, B79, B80, B88, D08, D09, D10.
  • Removal of card image B89, D13 (A69.1).
  • Alignment with the new ICS 1.0.o.
  • CPA Request for Approval template
  • Update of the Approval Secretariat email.
  • Removal of the option to do Level 1 evaluation through an audit.
  • Change Request template
  • Addition of the request type (new product, renewal or change/derivative).
  • EMV Approval Bulletin No. 14, CPA Regression
  • Update to align with the new test plan. The activation of the above document will be effective starting March 1st 2025, in accordance with the communication made in the Approval Bulletin 31. For additional information, please contact the EMVCo Card Approval Secretariat at card_approval@emvco.com. countries.

Legal Notice

This document summarizes EMVCo’s present plans for evaluation services and related policies and is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or non-infringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document.

countries.