The following Commercial guidance note Produced in partnership with Craig Armstrong of Shoosmiths provides comprehensive and up to date legal information covering:
This Practice Note is designed to assist commercial practitioners acting on behalf of merchants or their subcontractors and considers:
the entities to which Payment Card Industry Data Security Standards (PCI DSS) applies
PCI DSS principles and requirements
steps that are required for compliance with PCI DSS
enforcement, including card scheme fines
interaction with EU and UK privacy and data security laws and standards
contractual protections for merchants using service providers
It does not consider sector-specific laws, practices or PCI DSS requirements that are relevant to financial institutions, merchant acquirers, payment processors, payment networks and banks since those are only relevant to specialists working in those niche sectors. For detailed sector-specific guidance on payment services, see: Payment services—overview, Payment systems—overview and E-money—overview.
The card schemes Discover Financial Services and JCB International do not have any material presence in the UK and so this Practice Note focuses on the approach of MasterCard, Visa and American Express.
The Payment Card Industry Security Standards Council (PCI SSC) was founded in 2006 by the leading global card schemes, American Express, MasterCard, VISA, Discover Financial Services and JCB International.
The purpose of the PCI SSC is to promote and maintain the PCI DSS which are designed to improve payment card data security by setting out the minimum controls regarding the processing of payment
**excludes LexisPSL Practice Compliance, Practice Management and Risk and Compliance. To discuss trialling these LexisPSL services please email customer service via our online form. Free trials are only available to individuals based in the UK. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
To view the latest version of this document and thousands of others like it, sign-in to LexisPSL or register for a free trial.
Existing user? Sign-in
Take a free trial
Take a free trial
0330 161 1234