orking in Partnership with BT

Confirm Completion

We keep information safe $-$ PCI DSS

Would someone be correct in thinking that because their team don't take enough credit card payments, that Payment Card Industry Data Security Standard $($PCI$-$DSS$)$ compliance doesn't apply to them?

A$.$ Absolutely, a minimum of $10,000$ card payments in a $12$ month period is required before you need to comply with PCI$-$DSS

B$.$ PCI$-$DSS compliance is required for any part of BT that accepts payment cards, even if the quantity is one per week

C$.$ Of course, but only if fewer than $50$ card payments are taken per month