March 17, 2005, 12:00 AM

A new data-protection compliance option for Internet merchants

Online merchants seeking to comply with the data protection rules of MasterCard International, Visa USA, American Express Co. and the other major card brands now have an option that can save them time and money.

Online merchants seeking to comply with the data protection rules of MasterCard International, Visa USA, American Express Co. and the other major card brands now have an option that can save them time and money.

The Payment Card Industry Data Security Standard, introduced in January, incorporates 12 core security requirements drawn from Visa’s Cardholder Information Security Program and MasterCard’s Site Data Protection program. The combined standards allow Internet merchants to show compliance by meeting the industrywide PCI requirements rather than having to show compliance to the card companies’ data-protection standards on an individual basis, a Visa spokesperson says.

Merchant acquirers and service providers that store, process or transmit cardholder data must meet the standard, in addition to online retailers. PCI’s requirements include building and maintaining a secure network, protecting cardholder data, maintaining a vulnerability management program, implementing strong access control measures, monitoring and testing networks, and maintaining an information security policy. Other card companies endorsing the standards are Discover Financial Services, Diners Club and JCB.

comments powered by Disqus

Advertisement

Advertisement

Advertisement

From IR Blogs

FPO

Adrien Henni / E-Commerce

eBay and Russian Post accelerate cross-border deliveriies

EBay and Russian Post have signed a memorandum of cooperation aimed at reducing the time ...

FPO

Ernie Diaz / E-Commerce

Can Tencent win the mobile commerce battle with Alibaba?

The two Chinese Internet giants are increasingly encroaching on each other’s territories. A Beijing-based marketing ...

Advertisement