Compliance

"Data Protection, and Payment Card Industry Compliance - in a way you can understand."

Data Protection Act (DPA)

Data Protection compliance is a serious concern for anyone storing and/or processing customer data. The Information Commisioners Office holds a wealth of information relating to this subject, but it can be confusing to work through all the information - this is where we can help.

The ICO break the information down into key questions and is a perfect place to start if you wish to find out more. With so many areas now covered (Accessing Data, Procesing Customer Information, Storing Sensitive Data, Electronic Marketing - to name but a few) you need to be on top of your processes and proceedures in order to remain compliant.

The consequences of non-compliance can be severe - the ICO currently has the power to fine firms up to £500,000 for serious breaches of the Data Protection Act, but smaller fines of up to £5,000 can be handed down at magistrate level.

It is not complicated to make sure that you are compliant, but it does take time and effort to do it properly. You need to be aware of how you collect and store this information, how you process it and how it can be accessed. We can help you make sure you are doing it right.

Payment Card Industry Data Security Standard (PCI DSS)

PCI Security Standards are requirements set by the PCI Security Standards Council to protect card holder information and data. If you are a merchant that accepts payment by card you are required to be compliant. Many of the steps and processes are common sense, but it's something that is an ongoing process.

The PCI Security Standards Council has plenty of information to help you get started and will give you plenty of background information, so it's worth taking a look through their online resources to know what you need to be doing. Compliance is all about doing things the right way, and card holder information is one area where you should be doing this already. Specific requirements can vary slightly between the different card brands (American Express, Mastercard, Visa etc.) so you will need to check through each to ensure you are fully compliant.

To find out more on how we can help, get in touch.