The banking industry has long been tightly controlled and heavily regulated. Unlike many other sectors, the changes wrought by technology have tended to be evolutionary rather than disruptive. However, an EU regulation that is rapidly approaching its implementation deadline could have a major impact on payments and banking data. But as Andrew Whaley, VP of engineering at Arxan and formerly a lead engineer at Barclays Bank, explains in this interview, there are some serious questions about security and privacy that the new regulatory regime leaves unanswered. The banking industry has long been tightly controlled and heavily regulated. Unlike many sectors, the changes wrought by technology have tended to be evolutionary rather than disruptive. However, an EU regulation – the Payment Service Directive, or PSD2 – that is rapidly approaching its implementation deadline could have a major impact on payments and banking data. And as Andrew Whaley of Arxan explains in this interview, there are some serious questions about security and privacy that the new regulatory regime leaves unanswered.