Do the Payment Card Industry Data Standards Reduce Cybercrime? Hearing Before the Subcommitte on Emerging Threats, Cybersecurity, and Science and Technology of the Committee on Homeland Security, House of Representatives, One Hundred Eleventh Congress, First Session, March 31, 2009 [open pdf - 247KB]
From the opening statement of Yvette D. Clarke, "The Subcommittee is holding this hearing today to voice our concern about the growing number of data breaches; to understand what is being done to curb this activity; and to suggest that both merchants and the payment card industry have significant work ahead to meet our expectations. The payment card industry - Visa, MasterCard, Discover, American Express, and JCB - requires every business that stores, processes, or transmits cardholder data to comply with specific data security standards. The intent of these standards is to reduce the likelihood of successful data security breaches. On an annual basis, these merchants must certify that they are compliant with the Payment Card Industry Data Security Standards, known as 'PCI Data Security Standards.'" Statements, letters, and materials submitted for the record include those of the following: Yvette D. Clark; Bennie G. Thompson; Rita Glavin; Robert Russo; Joseph Majka; Michael Jones; Kirsten Trusko; Andrew R. Cochran and Dave Hogan.
Serial No. 111-14
Government Printing Office, Congressional Hearings: http://www.gpoaccess.gov/chearings/index.html