Frequently Asked Questions

< Back to search page

Can my payment application be validated using PA-DSS Version 3.0 or 3.1?

FAQ Response

New validations and High Impact Changes using PA-DSS v3.1 will be accepted until 31 August 2016. Low Impact and No Impact Changes to listed applications that were previously validated to PA-DSS 3.1 will be accepted until 28 October 2019.

New validations and High Impact Changes using PA-DSS v3.0 were accepted until 31 August 2015.  Low Impact and No Impact Changes to listed applications that are validated to PA-DSS 3.0 will be accepted until 28 October 2019.

June 2016
Article Number 1273

Related Articles

If a merchant develops an application that runs on a consumer’s device (e.g. smartphone, tablet, or laptop) that is used to accept payment card data, what are the merchant’s obligations regarding PCI DSS and PA-DSS for that application?

What is the Council’s guidance on the use of SHA-1?

What version of PCI DSS should I use?

Are PA-DSS applications considered valid if installed on an operating system that is not included in the payment application listing?

How does use of an expired PTS device affect my PCI DSS compliance?