Circular 1 (dated September 1, 2017) issued by Payment Systems Department (Nepal Rastra Bank) mandates electronic payment cards to adhere to security provisions and features that are internationally accepted and practiced. Licensing policy for payment service providers and operators require them to adhere to Payment Card Industry-Data Security Standard-PCI-DSS (within three years from the implementation of this licensing provision)