Latest / The Privacy Partnership Podcast with Robert Bateman
What does 'without undue delay' ACTUALLY MEAN? IL v Veracash
Send us Fan Mail
All over EU and UK law, we see a requirement to report certain stuff "without undue delay", often coupled with a hard deadline period (e.g., within 72 hours). A CJEU case from last month explored what these dual obligations mean in practice.
IL v Veracash (Case C‑665/23, 1 August 2025) concerned the old Payment Services Directive (PSD).
The PSD requires cardholders (consumers) to notify payment services provider about suspected fraudulent transactions "without undue delay" upon becoming aware of the transaction and within no more than 13 months.
The complainant notified the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.