Article L133-15 of the French Monetary and Financial Code
I. – The payment service provider issuing a payment instrument must ensure that personalised security data as defined in Article L. 133-4 is not accessible to persons other than the Payment Service User authorised to use the instrument. The payment service provider shall refrain from sending any unsolicited payment instrument, except where a payment instrument already given to the payment service user needs to be replaced. II. – The payment…