Payment Card Industry Data Security Standard (PCI DSS)

PCI - Security Standards Council - Participating Organisation

Does it apply to me?

Covering all the bases

PCI DSS applies to you if you're involved in storing, processing or transmitting any cardholder data. What's more, the standard doesn't just apply to storing data electronically. It also covers manual processing and storage.

Ensuring third-party compliance

As PCI DSS covers your entire trading environment, all third-party partners that store, process or transmit data must also comply. This means you can only achieve full compliance when your third-party partners comply. Third parties can include:

Resellers
Till vendors
Epos vendors
Software application providers
Payment service providers
Payment processing bureaux
Data storage providers.
Web hosting providers
Shopping cart providers
Software vendors