European regulators have handed a major lifeline to card firms and retailers by giving them more time to comply with incoming security reforms, but experts say more work will be needed at national level to clarify how any extension will work in practice.