FAQ #1282 Diff

Yes. As entities transition between different versions of PCI DSS it may be necessary for an organization, such as a merchant, to rely on a service provider whoWhen a new version of PCI DSS is available and as entities transition to the newer version of PCI DSS there may be situations where an entity relies on a TPSP that is validated to an earlierthe older PCI DSS version. In this instance, the service providersituation, the TPSP's validation must have been completed prior to the expiryretirement of the version of the standard to which they were validated, and their validation must still be current (that is,12 months have not passed since the service provider's validation).Entities should always contact their acquirer or the payment brands directly to determine their compliance reporting requirements, including how to report any third party service providersTPSPs. Contact details for the payment brands can be found in FAQ #1142 How do I contact the payment card brands?