9F71

Protected Data Envelope 2 sits in the write-access-protected half of Kernel 2's envelope design already introduced in this dictionary via Protected Data Envelope 5 (9F74) - the same distinction applies: protected here means the card itself controls who can write to this envelope, not that its contents carry cryptographic integrity the way a signed field does; it can still be read freely by anything that requests it. It's related to Protected Data Envelope 3 (9F72, covered alongside it here) and to Unprotected Data Envelope 1 (9F75), occupying the equivalent numbered slot in the write-open half of the same overall design. Like 9F74, its actual contents are scheme- or issuer-specific and not standardised by core EMV, so a terminal integrating against this envelope needs the relevant scheme's own data-storage documentation to know what 9F71 is actually meant to carry on a given card. See EMV Contactless Book C-2.