Payment Card Industry Compliance - Visa changes the retail security rules
Few days back Visa made changes to the most popular cardholder information security protection requirement that all organizations that accept credit card must comply with. eWeek reports on the changes in the article.
The key change happened in the categorization area. In the new process all transactions are included and previously only online transactions were counted. So a merchant or organizaiton is categorized in level 2 if they perform 1 million to 6 million transactions across all channels.
I think this is good from a cardholder perspective because security risk is present across all channels, so previous way of limiting only to online transactions was elimitating some of the merchants. From a merchant or retailer perspective this may mean some of them willl fall into category 2 for assessment.