The security standard for anyone handling payment card data, enforced through the card brands and acquirers.

Who does PCI-DSS apply to?

Merchants and service providers that store, process or transmit cardholder data

What is the current version of PCI-DSS?

PCI DSS v4.0.1; the requirements that were future-dated became mandatory on 31 March 2025

Framework

PCI-DSS

Payment Card Industry Data Security Standard

7 stories in the last 90 daysLatest story 1 day ago

What is PCI-DSS?: The security standard for anyone handling payment card data, enforced through the card brands and acquirers.
Who does PCI-DSS apply to?: Merchants and service providers that store, process or transmit cardholder data
What is the current version of PCI-DSS?: PCI DSS v4.0.1; the requirements that were future-dated became mandatory on 31 March 2025
Who is responsible for PCI-DSS?: PCI Security Standards Council

Official text: PCI Security Standards Council

PCI-DSSIndustry newsGlobal1 day ago

Visa and Mastercard drop honor all cards rule in merchant settlement

Visa and Mastercard agreed to eliminate the honor‑all‑cards requirement while settling litigation with merchants, though the change may have limited impact.

1 source · trade press

PCI-DSSIndustry news3 days ago
USDA proposes chip and tap-to-pay technology for EBT cards
USDA announced a proposal to add chip and tap‑to‑pay capabilities to SNAP EBT cards, technology already used in about a dozen states, to curb fraud.
1 source · trade press
PCI-DSSRegulatory update4 days ago
Federal Reserve loses debit card cap appeal
A U.S. appellate court ruled the Federal Reserve’s debit card interchange fee cap does not align with congressional intent.
1 source · trade press
PCI-DSSGuidance document6 days ago
FDIC clarifies supervisory approach to payment processing relationships with merchant customers
The FDIC issued new guidance on how banks may provide or facilitate payment processing services for merchants engaged in higher‑risk activities, outlining supervisory expectations.
1 source · trade press
PCI-DSSRule change23 days ago
PCI Security Standards Council releases key management and operations standard v1.0
PCI SSC released the Key Management and Operations (KMO) Standard v1.0, defining unified cryptographic key controls for PIN and P2PE data.
2 sources · 2 official
PCI-DSSRule change1 month ago
PCI Security Standards Council releases secure software lifecycle standard v2.0 with AI rules
PCI SSC issued Secure Software Lifecycle Standard v2.0, adding AI and sensitive‑asset rules; training launches Q4 2026 with a 12‑month transition from v1.1.
1 source · official
PCI-DSSGuidance document2 months ago
PCI Security Standards Council publishes AI security supplement for payment environments
PCI SSC released an AI security supplement on 15 September 2026, outlining guidance for AI use in payment environments and defending against AI‑driven attacks.
1 source · official