What is the relationship between the PCI Data Security Standard and the Payment Application Data Security Standard (PA-DSS) and PIN Transaction Security (PTS) Device requirements?
PCI DSS is the standard for merchants and service providers to protect cardholder data. The PA-DSS and PTS (formerly PED) device security requirements support the overall implementation of PCI DSS by allowing merchants to choose from Council certified payment applications and PTS devices to further cardholder data security. PA-DSS and PTS are not merchant initiatives. Rather, they are geared toward the application providers and PTS device manufacturers who must submit their applications and devices for testing against the standards. That said, merchants that utilize these applications and PTS devices must validate that they are using certified applications/approved devices when asked to do so by their Merchant Acquirer (credit card processor).
