This article discusses the upcoming March 31, 2025 deadline for PCI DSS 4.0.1 compliance and its implications for payment card acquirers. It highlights that 51 previously recommended security measures will become mandatory. Acquirers will need to implement multi-factor authentication for accessing card data environments and use change detection tools on payment pages. The article also covers the impact on merchant programs, new technical requirements such as automated audit log reviews and vulnerability scans, and the severe consequences of non-compliance, including fines and termination of banking relationships. Acquirers are advised to perform gap analyses, create implementation plans, and collaborate with Qualified Security Assessors to meet the deadline.
PCI DSS 4.0.1 Compliance Deadline: What Acquirers Must Know by March 2025 Acquirers face March 31, 2025 deadline for PCI DSS 4.0.1 compliance. Learn new requirements, merchant impact, and essential ...
Copyright © 2025 Acquirer News
