Questions tagged [pci-compliance]

Denotes compliance with the PCI Data Security Standards, a set of requirements designed to ensure companies processing, storing or transmitting credit card information properly secure that information.

Filter by
Sorted by
Tagged with
3
votes
2answers
57 views

Is it ok to filter sensitive user information from GA hits in GTM (rather than in app)?

I'm using GTM to filter out PII in the data sent to Google Analytics. I do this by only letting GTM send non-PII values to GA. So the data flow is the following : app ->(sends full payload)-> GTM ->...
3
votes
1answer
43 views

PCI Compliance on Non-Transacting Website?

I was wondering if anyone has any experience with an employer that is requesting their site be made PCI Compliant whilst not having any credit card data stored or transmitted through it. The site is ...
2
votes
3answers
5k views

What are the security implications of using Google Analytics?

I'd like to start using an analytics tool (namely Google Analytics) to collect information on how my web app is used, by whom, and what our user's technical capabilities are. As part of the ...
3
votes
5answers
143 views

Attaining credit card data

I've read the many posts on this site that say we are not allowed to store cc numbers if we are not pci-compliant. But, I'm wondering if it is possible to send a CC number through a form to an email ...
5
votes
1answer
2k views

Does including Google Analytics on a page makes you run the risk of failing a PCI audit?

My webshop is currently in the process of becoming PCI compliant. For business intelligence reasons we would like to include Google analytics code (or a code from a similar package) on the checkout ...
3
votes
2answers
83 views

Credit card payments on mobile websites

I am quite confused regarding PCI requirements. Say if I want to develop a mobile web browser based shopping portal, am I allowed to? Under the PCI requirements?
3
votes
2answers
837 views

PCI compliance when using third-party processing

My company is outsourcing the development of our new e-commerce site to a third party web development company. The way they set up our site to handle transactions is by having the user enter the ...
2
votes
2answers
229 views

PCI-Compliance: Automatic saving of Credit Cards to Authorize.net CIM

Our website uses authorize.net CIM to store consumer credit card's securely after a user's initial purchase. We currently do not have an "opt-in" button allowing us to do this. However, after ...
2
votes
1answer
476 views

What are the PCI compliance and security implications for processing payments through my embeddable widget?

I've built a little embeddable Javascript widget that list items for sale for publishers to embed on their site. The current use case is that when the user clicks on an item, they are redirected to my ...
2
votes
1answer
126 views

Off-site Cardholder Data Storage

Is there a service or site out there that will store cardholder data for me? I don't need any kind of transaction processing or recurring billing... I just need somewhere that I can store data on ...
1
vote
2answers
920 views

If I must turn off passive ports to be PCI compliant, how do I upload my website?

Our company is undergoing procedures to ensure we are PCI compliant. My site host tells me that they have disabled passive ports in order to pass the PCI scans. This has the effect of disabling ...
10
votes
5answers
208 views

Is PCI compliance scrutinised?

After reading the very strongly worded recommendations regarding the storage of credit card details here, I've got to wonder - what happens if a non-PCI compliant company starts storing credit card ...