I just completed my annual PCI Compliance which Clover Go requires of users. I was always skeptical of Square and others who do not require compliance. I see it as one more arrow in the defense quiver if I am ever sued over a credit card data breach. The questionnaire took an hour to complete as I did not understand most of the acronyms. I am not an IT person and they are certifying mega retail users as well as us art studio people with only a few sales. I sent them feedback about this issue. They also remotely scan your equipment and here again you really don’t know what is going on so I spoke with a rep. A few hours late I get email, I am good to go for another year. Here is what PCI Compliance is and if you are in business, it is something to consider. From: https://www.imperva.com/learn/data-security/pci-dss-certification/
"The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards formed in 2004 by Visa, MasterCard, Discover Financial Services, JCB International and American Express. Governed by the Payment Card Industry Security Standards Council (PCI SSC), the compliance scheme aims to secure credit and debit card transactions against data theft and fraud. While the PCI SSC has no legal authority to compel compliance, it is a requirement for any business that processes credit or debit card transactions. PCI certification is also considered the best way to safeguard sensitive data and information, thereby helping businesses build long lasting and trusting relationships with their customers."
Comments