3 replies to this topic

[markw10]

I am working on my PCI Compliance but unfortunately have not been able to resolve all threats yet and am down to around 7 level 3 threats and no level 4 or level 5 threats.
If I am correct the deadline for this is July 1st. is that correct?
What happens if I'm not PCI Compliant by then?
Is there any way you can get an extension if you can show that you're working on becoming compliant?
If not, is your ability to process credit cards simply turned off on July 1st?

[Alex-Ulsk]

markw10, on 20 June 2010, 20:49, said:

I am working on my PCI Compliance but unfortunately have not been able to resolve all threats yet and am down to around 7 level 3 threats and no level 4 or level 5 threats.
If I am correct the deadline for this is July 1st. is that correct?

Depends on country you are located in. For US and Canadian merchants the deadline was July 1st 2010 indeed.

For other countries - July the 1st 2012.

markw10, on 20 June 2010, 20:49, said:

What happens if I'm not PCI Compliant by then?

Most likely you won't be able to pass your next SAQ with your merchant account provider and they won't prolong their service for you. But you'd better contact your merchant account provider for details as different providers act differently on that.

markw10, on 20 June 2010, 20:49, said:

Is there any way you can get an extension if you can show that you're working on becoming compliant?

This is quite possible. 

markw10, on 20 June 2010, 20:49, said:

If not, is your ability to process credit cards simply turned off on July 1st?

No, that's not going to happen. Some real troubles may appear on your next SAQ submission to your merchant account provider.

Edited by Alex-Ulsk, 19 August 2010, 10:37.

[oldj]

Don't know where you all get your information from but according to my bank they would like you to be PCI compliant so that their liability factor is reduced but as far as I know there are no laws currently in effect forcing online merchants who are processing Credit Cards to be compliant.

[DunWeb]

John,

There absolutely IS laws requiring PCI compliance (In North America). The specific requirements depend on your location so you should check with state/federal requirements.



Chris