What is PCI DSS?
PCI DSS (Payment Card Industry Data Security Standard) is a set of security rules created by the major card schemes, including Visa, Mastercard, American Express, through the PCI Security Standards Council.
Its purpose is simple: keep cardholder data safe wherever it's stored, processed, or transmitted, so that fewer cards get compromised and fewer customers become victims of fraud.
The current version, PCI DSS 4.0.1, applies to every business that touches card payments in any way. If a customer can pay you by card, PCI DSS has something to say about how that data is handled.
Why is it relevant to me?
There are two reasons. First, it's contractual: card schemes require every business accepting card payments to validate compliance, and this obligation is typically passed down through your payment service provider or acquiring bank - including Mollie. Second, it's protective: following PCI DSS meaningfully lowers your risk of a data breach, the costs (financial and reputational) that come with one, and the erosion of customer trust that follows.
Compliance with PCI DSS not only helps mitigate the risk of data breaches but also builds trust with your customers by demonstrating your commitment to security.
To understand more about your responsibility: Is Mollie compliant with PCI DSS?