- Handle the receipt of consumer credit card data; i.e., collect and transmit sensitive card data in a secure manner.
- Store data securely, as described in the 12 security domains of the PVI standard.
- Validate, on an annual basis, that the necessary security controls are in place; this may involve forms, questionnaires, external vulnerability scanning services and third-party audits.
