Frequently Asked Questions

< Back to search page

Who has to comply with the PCI standards?

FAQ Response

Each of PCI SSC’s founding payment brand members (American Express, Discover, JCB International, MasterCard, and Visa) currently have their own PCI compliance programs for the protection of their affiliated payment card account data.  Entities should contact the payment brands directly for information about their compliance programs. Contact details for the payment brands can be found in How do I contact the payment card brands?

Questions regarding compliance requirements for payment card account data affiliated with other payment networks or brands should be referred to the applicable payment network or brand.

PCI SSC also encourages entities to be aware of potential nuances in local laws and regulations that could affect applicability of the PCI standards.
 

August 2016
Article Number 1436

Related Articles

Does PCI DSS define which versions of TLS must be used?

How does encrypted cardholder data impact PCI DSS scope for third-party service providers?

Does the use of expired PTS POI devices meet eligibility criteria for SAQ B-IP?

What are acceptable formats for truncation of primary account numbers?

How can an entity meet PCI DSS requirements for PAN masking and truncation if it has migrated to 8-digit BINs?