Common use of PCI-DSS Compliance Clause in Contracts

PCI-DSS Compliance. We agree to maintain compliance with the Payment Card Industry Data Security Standard (“PCI DSS”). We will comply with all applicable PCI DSS requirements insofar as We own or otherwise store, process, or transmit cardholder data, which is information associated with a payment card, such as account number, expiration date, and CVV2 (“Cardholder data”), on your behalf. Within the limits of liability set forth elsewhere in these Terms, We are only responsible for the security of your data and/or cardholder data to the extent that We have such data. Except as specified in the previous sentence, you are solely responsible for cardholder data until We own or otherwise store, process, or transmit cardholder data on your behalf.

PCI-DSS Compliance. We The Provider agree to maintain compliance with the Payment Card Industry Data Security Standard (“PCI DSS”). We The Provider will comply with all applicable PCI DSS requirements insofar as We the Provider own or otherwise store, process, or transmit cardholder data, which is information associated with a payment card, such as account number, expiration date, and CVV2 (“Cardholder data”), on your behalf. Within the limits of liability set forth elsewhere in these Terms, We the Provider are only responsible for the security of your data and/or cardholder data to the extent that We the Provider have such data. Except as specified in the previous sentence, you are solely responsible for cardholder data until We own or otherwise store, process, or transmit cardholder data on your behalf.