pci compliance and merchant accounts

[byronyasgur]

i was under the impression that pci compliance was not mandatory in ireland but was talking to someone in sage pay uk and he said it was .... can anyone say for certain .... are people building it in or not even if it isnt

any pointers for the best place to get a merchant account ( im thinking mainly best in terms of service support reliability as opposed to price but i dont want to pay over the top either )

 

[link8r]

Often it's built in by the gateway when the Vendor opts to pass collecting credit card data to the Gateway (e.g. Realex and Pay-and-Shop).

For the most part, Irish banks separate the gateway function and their Merchant account.

AFIK, only a few do both (World Pay, PayPal)

AIB Merchant Services - Secure credit card, debit card and eCommerce payment solutions

 

[mneylon]

Visa and the other cards are pushing PCI compliance
It's not handled just by the gateway.
The merchant has to be PCI compliant as well

 

[byronyasgur]

Visa and the other cards are pushing PCI compliance
It's not handled just by the gateway.
The merchant has to be PCI compliant as well

Do you mean "has to" as in required to do so by some stipulation ... honestly i wouldnt have thought of pci compliance except that the guy from sage pay uk said i needed to be pci compliant

 

[mneylon]

Do you mean "has to" as in required to do so by some stipulation ... honestly i wouldnt have thought of pci compliance except that the guy from sage pay uk said i needed to be pci compliant

You'd need to talk to the banks to find out the exact terms
We are required to be PCI compliant and AIB get quite upset with us if they feel that are certification might lapse
Bear in mind, however, that there are different levels of PCI compliance
At the lower levels it's more self-assessment than anything else

 

[byronyasgur]

thanks .... i came across this article too, which got me rattled enough to check it out a bit more ... ( apparently starting july 2010 acquiring banks are being forced by visa etc to fine merchants using non pci compliant cart software, if i read/remember it right ) How PCI Compliance Can Impact Your Web Design Company