(1) The obligations of a payment service user entitled to use a payment instrument are -
(a) of using the payment instrument in accordance with the terms governing its issue and use, and
(b) of notifying the payment service provider that issued the instrument, or an entity specified by that payment service provider, without undue delay on becoming aware of the loss, theft or misappropriation of the payment instrument or its unauthorised use.
(2) For the purposes of paragraph (1) (a), a payment service user shall, as soon as he or she receives a payment instrument, take all reasonable steps to keep its personalised security features safe.