PCI Compliance

The Payment Card Industry (PCI) Council was created in 2006 by Visa and MasterCard and then later adopted by American Express, Discover and JCB (Japan Credit Bureau) to govern the security standards for the payment industry.  The Payment Card Data Security Standards (PCI-DSS) represents a common set of requirements designed to ensure ALL companies that process, store or transmit credit card information maintain a secure environment and safely handle sensitive information.

PCI DSS is a set of 12 general requirements grouped into six areas: build and maintain a secure network; protect cardholder data; maintain a vulnerability management program; implement strong access control measures; regularly monitor and test networks and maintain an information security policy.

These standards are NOT optional.  Acceptance of payment cards anywhere on our campus makes us subject to the standards.  There can be significant financial costs for non-compliance.   Please read our Important Information regarding credit card processing.