What are the compliance validation reporting requirements for merchants?
A. Merchants will provide compliance validation documentation to their acquirer(s). Though the compliance validation process is aligned for merchants, acquirers must follow each payment card company’s respective reporting requirements to ensure that a merchant’s status is appropriately filed with each.
Under the new PCI standard, the compliance validation requirements for merchants of the VISA CISP and MasterCard SDP programs have been aligned so that merchants need only validate their compliance once to fulfill their obligation to all payment cards accepted. Merchants will provide compliance validation documentation to their Acquirer(s). Compliance validation documentation consists of the annual self assessment questionnaire and the quarterly PCI scan compliance report.
