Agents operating within the BSP who are not Payment Card Industry (PCI) Data Security Standard (DSS) compliant by June 1 stand the chance of losing their Iata accreditation. Despite the deadline looming, most agents say they have no idea what PCI DSS is and claim they haven’t received notification from Iata on the matter.
Otto de Vries, ceo of Asata, confirms that Iata recently sent out a communication stating that PCI DSS compliance will be a mandatory condition to obtain and retain accreditation as an Iata Accredited Agent under the Passenger Sales Agency Rules in Resolution 818g. He says this requirement has not emerged out of the blue. “Asata has been encouraging compliance since 2008 and gives members a document explaining basics of PCI DSS compliance when they join or if the agency is up for renewal.” This document is available on the Asata website or upon request.
For more on this story read this week’s edition of TNW.