News
PCI DSS Compliance: Important Info for Website Owners Processing Credit Card Transactions
21 July 2009
No matter what industry you’re in or how many card transactions you process, as an Internet merchant you must be compliant with the Payment Card Industry Data Security Standard (PCI DSS), a set of standards developed to standardise card payment security.
If you run an eCommerce website or accept customer card transactions over the Internet, the PCI DSS affects you. To be compliant with its standards, which is a legal obligation, you must either use a compliant Payment Service Provider (PSP) or ensure that your own card handling processes meet the necessary standards.
For many eCommerce site owners, the simplest approach is to use a complaint PSP, who will manage the transaction process for you and provide you with a secure server on which your customers can safely enter their credit card details.
If you process credit card details using your PDQ machine or customers enter their card details directly on your website rather than on a PSP’s secure server, you must verify that you are PCI compliant.
