Why is it that all service providers are not requiring that merchants participate in a PCI DSS Support Program at this time?
While validation is not yet required, PCI DSS Compliance is mandatory. Many processors have already implemented or are in the process of implementing these types of programs. It is expected that validation will be required industry wide in the near future. Merchants should also consider why they would want to process with a company that does not take their data security seriously. PCI DSS programs are designed to help protect cardholder’s information and assist merchants avoid fines and risk potentially negative exposure. With the recent compromises in data security, it is essential that merchants understand the value that these programs provide.
