article thumbnail

PCI requirements and who needs to follow them

Basis Theory

Third-Party Service Provider ( TPSP or "service provider") refers to an entity other than the Merchant, Acquirer, or Issuer involved in storing, processing, or transmitting card data. Restrict access to cardholder data by business need to know Like in the real world, only authorized personnel should access all or part of the card data.

PCI DSS 88