Can someone help me understand how the PCI Timeout rules change for an application like the Starbucks App? A user is able to keep their card open ready for scan for longer the 15 minutes if needed, but PCI A11y AA also requires to display a message giving the user a chance to react and keep the session alive.

I understand and have implemented it from an e-commerce approach but am a bit confused on the e-wallet approach.

| improve this question | | | | |
  • 1
    Which document are you referencing? They have a lot of documentation on various things, and I'm not sure which one you're referring to. It's quite possible that the difference is that the cardholder isn't subject to any PCI requirements, so an app they use doesn't have to deal with that. But without knowing the specific document/rule, I can't confirm that. – Bobson Feb 8 at 23:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.