Common use of PCI Standards Clause in Contracts

PCI Standards. 4.1 In order to maintain a high level of security in the global card payment systems and to enhance confidence in Cards as a means of payment, it is of utmost importance that anyone who processes Card Information does so in a secure manner. For this reason, the industry has agreed on a joint industry standard for processing Card Information. The standard is called Payment Card Industry (PCI) Data Security Standard (DSS) and is developed by inter alia Visa and MasterCard. 4.2 The Merchant undertakes to comply with the PCI DSS standard as published on ▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ in order to process Card Information in a secure manner. 4.3 In case the Merchant suspects irregularities or fraudulent use of Card Information, the Merchant is required to report this suspicion to Worldline Nordics without delay. 4.4 The Merchant undertakes not to store any sensitive data regarding Cards or data relating to Transactions. In cases where the Merchant’s business requires handling and storage of Card data, Card Information or data relating to Transactions, such handling and/or storage must be carried out in accordance with all applicable laws, regulations and rules. 4.5 Worldline Nordics shall at all times have the right at its request (following the giving of reasonable notice where possible) to: a) receive all information (and confirmations) with respect to the Merchant´s compliance with section 4.4; b) audit, or request the audit of, the Merchant’s compliance with section 4.4;