The second Payment Services Directive (PSD2) is a mandatory regulation to which all merchants in the EEA — and other retailers who have customers in the EEA — must conform. Among other provisions, it changes the online transaction authentication process, provides the right for the customer to pay by credit transfer directly from a payment account, and reinforces legislation on payment surcharges. This report describes how application development and delivery (AD&D) professionals working in retail should respond to the legislation.