This document describes how UNC-Chapel Hill complies with (1) the Payment Card Industry's (including American Express, Discover, Master Card, VISA, and other major card brands) important and stringent security requirements to protect payment card data; and (2) with E-Commerce policies published by the NC Office of State Controller.
Payment card merchant accounts must be compliant with all applicable Data Security Standards (DSS) for their method of payment acceptance. Maintaining Payment Card Industry (PCI) compliance is a continual process.
This procedure explains how to request changes to an existing payment card merchant account.
This procedure explains how to securely dispose of point-of-sale terminals, related equipment, and deactivation of a payment card merchant account.
This procedure explains how to reconcile and post payment card transactions.
University merchant departments that provide payment card merchant services are responsible for related equipment and supply costs, processing fees, and fines and penalties resulting from noncompliance with University, State, and Payment Card Industry (PCI) policies. University constituents are also responsible for adhering to internal control standards for the safeguarding of receipts and data.
There are specific standards that must be adhered to with regard to the processing or retention of card holder data. Card holder data is defined as, a full personal identification number, card holder name, expiration date and/or service code, additional sensitive information.
The University of North Carolina at Chapel Hill is using TouchNet's hosting service. TouchNet will run, manage and maintain our licensed TouchNet software in their Data Center.