The Payment Card Industry Security Standards Council, aka the governing body setting out the contractual obligations for merchants to accept card payments, has issued a supplemental guidance this month, according to Craig Hoffman and Charles Shih of Baker & Hostetler in an August 18 post on the Data Privacy Monitor blog.
“For merchants, long gone are the days of using a card reader with a dial-up connection to their payment processor,” noted the authors, who say that in this day and age, retailers are relying on third party service providers to process their payments. These providers are privy to a whole bunch of important customer data, which could impact security. If and when there is a breach, even at the fault of the third party, the merchant is blameworthy.
