Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 7 down vote favorite

Is there a way for a consumer to report PCI non compliance?

share|improve this question
Not that this will help, but PCI does require you to handle security reports... But of course, if they're not compliant, they probably dont have that either... – AviD♦ Apr 20 '11 at 19:26
@Avid: and what about the companies which show off that they are following PCI-DSS standard? How can a consumer report in that case for non-complaince? – p_upadhyay Apr 21 '11 at 8:33

1 Answer

up vote 2 down vote

The PCI organization sets the standards. The card brands enforce those standards with fines. If you contact a brand (Visa, American Express, etc)., they may act on it. I am not aware of any PCI compliance hotline, and it may involve a lot of transfers and "call this person" redirects to find somebody... who may do nothing anyway. If you have the time, though, I encourage you to work on finding your way through that process.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.