If you are using sagepay suite use the "form" or "server" methods, you should be fine (as long as you have 3d Secure turned on), but if you are using direct changes are needed ( 9 addional feilds need to be past). More info here
If you are using "direct" then sagepay suite needs to be updated. Ebizmarts ( the creators of the sagepay suite extension) are working on an update and say should be ready mid August.
Update: Ebizmart that do the sagepay module said they will be updating there module to be compatible with 3d secure V2
Due to delays on Sage Pay's TEST environment updates these are the new release dates for Sage Pay Suite Pro compatibility with 3D v2 + SCA:
- Direct integration: August 22nd 2019.
- Pi Integration: August 30th 2019.
Please note that Form and Server integrations are already supported
Update 2: As pointed out in wr125 answer, The FCA have recently announced an 18-month plan extension. So I contacted sagepay for confirmation, they said:
Yes this new update from the FCA has relaxed the deadline so vendors will not face penalties for not using SCA until March 2021. Sage Pay will still be updating the payment gateway in time for September 14th when 3D Secure v2 will be made available but vendors do now have until March 2021 to become compliant
......Essentially 3D Secure v2 will be available from September 14th 2019 as planned but there will be no penalties for vendors not using 3D Secure v2 until March 2021, as such you have more time to update your integration
Update 3: Just for completion (from sagepay)
Yes, you can continue not using 3D Secure at all. Not passing transactions through 3D Secure at all can incur additional charges from your merchant bank however...