What happens if not PCI DSS compliant?
Non-compliance can lead to many different consequences such as monthly penalties, data breaches, legal action, damaged reputation, and even revenue loss. PCI Non-Compliance can result in penalties ranging from $5,000 to $100,000 per month by the Credit Card Companies (Visa, MasterCard, Discover, AMEX).
What are some examples of non compliance?
Examples of Non Compliance
- Disregard for the health and safety regulations, such as failure to wear the necessary personal protective equipment (PPE) when undertaking specific tasks.
- Refusal to obey the code of conduct by disrespecting or harassing other employees or customers.
Is the PCI DSS the same as the law?
In reality, the PCI DSS is not a law but rather a set of standards agreed upon and enforced by the major card brands (Visa, MasterCard, American Express, Discover and JCB) in conjunction with merchant banks and payment processors.
What happens if you are out of compliance with PCI?
Businesses that are found to be out of compliance with the PCI DSS may be subject to fines by the entity they use to process their credit card transactions. Furthermore, non-compliant businesses that experience a data breach in which credit card data is actually stolen are subject to much larger fines and fees from the banks, card brands, etc.
When to report a business for violation of the PCI DSS?
Before you report a business in connection with the Payment Card Industry Data Security Standard (PCI DSS), you should first know a bit about what the standard is as well as what it does and does not cover. The word “violation” implies that the PCI DSS is a law.
Do you have to be PCI compliant with debit card?
A: If you accept credit or debit cards as a form of payment, then PCI compliance applies to you. The storage of card data is risky, so if you don’t store card data, then becoming secure and compliant may be easier. Q12: Are debit card transactions in scope for PCI?