CRUCIAL ANNOUNCEMENT ON CREDIT CARD TRANSACTIONS MADE BY WAY OF "GDS" IN TICKET SALES

This announcement is a crucial reminder about “PCI DSS” Compliance. With the announcement sent on November 2, 2022, all our agencies were informed of the Reso 812 provision, which was adopted by the 44th Passenger Agency Conference (PaConf) in May 2022 to strengthen the BSP card sales channel. According to Reso 812, section 4.2.2.1, if it is determined that any of our agents who are not PCI DSS compliant have not declared that they are compliant, or declare that they do not make transactions with a customer credit card as of January 01, 2023, are determined to have made a transaction with a customer credit card, we will inform those agents that they are wrong or not. A risk event (iregulite) will be assigned due to an incorrect PCI DSS declaration and this risk event will remain recorded in the agent's risk history for 12 months.
Following the notification of the announcement to all agencies in BSP Turkey, one by one notification (using the agency's code in the filename) was sent to 52 agencies that were found to be non-conforming, and it was stated that they would take the necessary actions. Otherwise, a risk event would be written in their risk history as of the effective date.
January 1, 2023, the effective date of the relevant provision, has been changed to February 1, 2023, for the first and last time for our country, with the approval of PSG, and no risk event will be recorded in the risk histories of non-compliant agencies until February 1, 2023. After this date, those who do not consider the warning messages and make inappropriate ticketing to PCI DDS. The process of assigning a risk event to the agencies that sell credit cards over GDS, even though they do not have a PCI DSS Certificate, will begin.

In the next 2 posts we will make after this sharing, our previous announcements on the subject will be repeated. You must follow these announcements carefully.

It is announced concerning all our members.