Re:“We found PayPal vulnerabilities and PayPal punished us f...
by shkkmo on Monday February 24, 2020 @09:52AM
(#22404404)
> Actually this makes a pretty good case for this regulation being a joke.
PCI-DSS is not government regulation, but an industry created and enforced standard. Compliance is not mandated by federal law and only a couple of states have laws that reference it. For example, Nevada requires compliance while Washington doesn't require compliance but does remove liability for breaches for compliant businesses.
Re:“We found PayPal vulnerabilities and PayPal punished us f...
by monadic2 on Tuesday February 25, 2020 @01:50PM
(#22415967)
I meant it in a looser sense (like “constraint” I guess), but it just reinforces the reputation that PCI-DSS is a checklist you can buy, not meaningful itself.
PCI-DSS is not government regulation, but an industry created and enforced standard. Compliance is not mandated by federal law and only a couple of states have laws that reference it. For example, Nevada requires compliance while Washington doesn't require compliance but does remove liability for breaches for compliant businesses.