What if a merchant has outsourced the storage, processing, or transmission of cardholder data to a service provider?
Merchants should deal only with PCI Data Security Standards compliant service providers. If there are service providers handling cardholder data on a merchant’s behalf, the merchant is still responsible for the security of this data and must ensure that contracts with these service providers specifically include PCI Data Security Standards compliance as a condition of business. Per association rules, you must inform Landmark Merchant Solutions if you are using a service provider. Click here for a list of PCI Compliant Service Providers.
Related Questions
- What if I have outsourced the storage, processing, or transmission of cardholder data to a third party other than Chase Paymentech?
- What if a merchant has outsourced the storage, processing, or transmission of cardholder data to a service provider?
- What if a merchant or service provider does not store cardholder data?
