3 ms·
You should look at PCI DSS, the new requirements for processing credit card purchases. I haven't looked into it very deeply, but according to the reporting abou
by m_eiman 18y ago
You should look at PCI DSS, the new requirements for processing credit card purchases. I haven't looked into it very deeply, but according to the reporting about it you'll no longer be able to use a simple form on your own site to handle credit cards - you'll have to go through an external payment processing site (or implement it yourself and have it audited - expensive!).
Compliance with these new rules will be mandatory beginning next year.
More info at https://www.pcisecuritystandards.org/ https://www.pcisecuritystandards.org/
- andrewf 18y agoAFAIK, if you're not doing loads (well into six figures) of transactions, you don't need to get external auditors in. But there's a lot of work in figuring out what is required, and the penalties for screwing up are severe, so you may want to anyway.
- m_eiman 18y agoThis is what they have to say about this: """How do I determine whether my business would be required to do a full independent assessment or a self assessment? Merchants that store payment account data should contact the acquiring financial institutions with whom they have merchant agreements to determine whether they must validate compliance and the specific requirements for compliance validation. Service providers should contact the individual payment brands for further information. """ Wonderful example of saying "we're not saying until you're paying" in as words as possible.
- andrewf 18y agoMost banks will have a standard policy, and you should be able to dig it out of their sales guys.