Payment Card Industry Data Security Standard (PCI DSS)

PCI DSS

Payment Card Industry Data Security Standard (PCI DSS) is a set of 12 requirements that ALL businesses who take Credit or Debit card payments must comply with - even if you are outsourcing your payments to a Payment Service Provider. If you are involved in payments you are affected!

How Do I Comply?

This depends on your merchant level. The PCI Levels, as prescribed by the Card Schemes, are as follows:

Levels 1-3

Greater than 6 million Visa or MasterCard transactions a year

Between 1 and 6 million Visa or MasterCard transactions per annum

Between 20,000 and 1 million e-commerce Visa or MasterCard transactions per annum

Level 4

Less than 20,000 e-commerce Visa or MasterCard transactions per annum or less than 1 million other Visa or MasterCard transaction per annum

Prioritised Approach

The Prioritised Approach and provides guidance on how to focus PCI DSS compliance work in a way that ensures prioritising the highest security risks.

About PCI DSS

The PCI Security Standards Council manages the security standards for the payment cards industry. The council was formed by Visa, MasterCard, American Express, JCB and Discover.