When seeking Payment Card Industry (PCI) compliance, the expiration of terminals can introduce complexities and uncertainties for merchants. In this video, Sully Perella, a practice leader at Schellman, sheds light on the significance of expired terminals and offers insights into navigating this compliance challenge.
Typically identified through an approved PIN Transaction Security (PTS) listing, terminals undergo rigorous testing and are assigned expiration dates based on testing timelines and control parameters. Those that do expire can pose various implications for PCI compliance—if a terminal's listing has expired, merchants must engage with their acquiring bank to assess its impact on PCI compliance.
However, there's a silver lining for merchants utilizing terminals as part of a Point-to-Point Encryption (P2PE) solution—if an expired terminal is integral to an active P2PE solution, there's a grace period for continued usage.
Navigating PCI compliance can be daunting, especially where terminal details like manufacturer, hardware, and software versions are concerned and we encourage merchants to reach out to us for guidance. With our expert guidance and proactive measures, merchants can ensure adherence to PCI standards while leveraging the benefits of secure payment processing solutions.