PCI and HIPAA Compliance for Medical & Dental Practices

The Payment Card Industry Data Security Standard, [PCI DSS] is a set of requirements designed to ensure that all companies that process, store or transmit credit card information maintain a secure environment. The Payment Card Industry Security Standards Council was launched to manage the ongoing evolution of the Payment Card Industry, [PCI], security standards with the focus on improving credit card processing security.
PCI is administered and managed by an independent body that was created by the major payment card brands, Visa, MasterCard, American Express, and Discover.
PCI applies to ANY organization or merchant, regardless of size or number of transactions, that accepts, transmits or stores any cardholder data. So, if you accept credit cards in your practice, the PCI rules and requirements apply.
The payment brands, Visa, MasterCard, American Express and Discover, may fine their bank partners $5,000 to $100,000 per month for PCI compliance violations. The banks typically pass these fines down to the processor and their merchants if non - compliance is evident. If your practice experiences a data breach where credit card data is stolen, you’ll be subject to much larger fines from the banks and card brands, and you are also required to report the breach, which may further damage the reputation of the practice.
www.officesafe....

[@user-xu6ie1sf4c]

Cartoonist is distracting!