Why haven’t I heard anything from the card brands regarding PCI compliance?
The individual card brands are requiring that the Merchant Banks/Processors implement individual PCI compliance program to educate merchants on compliance and ensure that they meet PCI compliance requirements. They have required that all Merchant Banks/Processors have a plan in place to ensure that all of their merchants obtain and maintain compliance with the standard. Most of the breaches you hear of in the news are large retailers, but many people do not realize that over 80% of compromises occur at small merchant locations.