4 ms·
It's not a regulation. It's a contractual obligation between the merchant and the PCI counsel (which is made up by VISA/Mastercard/the backing banks/etc). It wa
by whatsmyusername 7y ago
It's not a regulation. It's a contractual obligation between the merchant and the PCI counsel (which is made up by VISA/Mastercard/the backing banks/etc). It was put in place to avoid regulation.
- Mirioron 7y agoThen perhaps regulation is necessary if this is their level of scrutiny?
- deleted 7y ago[deleted]
- smolder 7y agoYeah, but in this political climate, we probably can't get regulation passed that isn't written by the companies it regulates.
- whatsmyusername 7y agoThat will never happen under any circumstance.
- vel0city 7y agoregulation: noun. a rule or directive made and maintained by an authority. Regulations can be self-imposed on an industry, it does not have to be something the government imposes. Calling PCI-DSS a regulation is still accurate despite many people conflating the term "regulation" solely with government action. In this case, the authority creating the regulations is the PCI Security Standards Council who have their power because the big players in the industry give it to them.