Why do UNC Charlotte merchants have to comply with PCI DSS?

 
  1. The PCI DSS (Payment Card Industry Data Security Standard) applies to all entities, software systems, and equipment that store, process, or transmit cardholder data. 
  2. Therefore, any campus department, entity, or individual processing cards falls under its guidance and is subject to its requirements
  3. Also, the Office of the State Controller for the state of North Carolina (NC OSC), as well as the UNC Charlotte banking contracts, state that the University is subject to PCI DSS and required to meet its standards.
  4. For more information about PCI DSS, read this FAQ