As of which date does the service provider acknowledgment requirement become mandatory?

As of which date does the service provider acknowledgment requirement become mandatory?

• A. June 30, 2015
• B. January 1, 2015
• C. June 30, 2014
• D. December 31, 2015

Answer: (A)

Understanding when service providers must officially acknowledge their PCI DSS status is about ensuring merchants know which third parties handle card data and that those providers are maintaining compliance. The mandatory date for this written acknowledgment was set to June 30, 2015. This deadline lined up with the rollout of PCI DSS version 3.0 and gave providers time to establish a formal process to confirm their compliance status to each merchant they serve, along with sharing appropriate documentation as needed. The other dates don’t fit because they don’t correspond to the mandated deadline established by the standard for this requirement.

Understanding when service providers must officially acknowledge their PCI DSS status is about ensuring merchants know which third parties handle card data and that those providers are maintaining compliance. The mandatory date for this written acknowledgment was set to June 30, 2015. This deadline lined up with the rollout of PCI DSS version 3.0 and gave providers time to establish a formal process to confirm their compliance status to each merchant they serve, along with sharing appropriate documentation as needed. The other dates don’t fit because they don’t correspond to the mandated deadline established by the standard for this requirement.