what can anyone tell me about this? We use two different cc processors, and one we have not heard from about this but Suntrust has charged an additional fee for not being compliant. Are you compliant?
My understanding (as of August 2010 when I heard this). If you had a broadband internet connection ie. cable, fiber, always on internet connection, you needed to be compliant or get hit with additional charges and risk law suits if database was hacked or exposed. If you had dial-up modem(much harder to hack) you were OK, at least for a while.
Its all based on how you handle the CC info. If you are storing any of it, you must have compliant software. You do not have to have broadband to be compliant with some systems. You must verify the card immediately and not "batch" settle. There is a lot to it and from what I have seen many of the processors do not have a clue!