Payment Card Industry Data Security Standards (PCI-DSS)
PCI DSS is a set of standards for reducing credit card fraud and protecting the personal details of credit cardholders. The security controls of this regulation are designed to secure the three primary stages of the cardholder data lifecycle:
Processing
Storage
Transfer
Is Complying with PCI DSS Mandatory?
Every organization that processes customer credit card information must comply with PCI DSS, including merchants and payment solution providers.
What are the penalties for not complying with PCI DSS?
Failure to comply with PCI DSS could result in fines ranging from $5,000 to $100,000 per month until compliance is achieved.