IMPORTANT ANNOUNCEMENT ON NEW PROVISION ON PCI DSS COMPLIANCE ON TICKET SALES

Dear Members;

What is PCI DSS?
The Payment Card Industry Data Security Standard (PCI DSS) is a global data security standard for protecting confidential payment card information. For comprehensive information, you can visit https://www.iata.org/en/services/finance/pci-dss/#tab-1 website.

If you are regulating "Customer Credit Card" transactions from either of your Parent or Partner Organizations, you must declare each of these location codes as PCI DSS Compliant in the "IATA Customer Portal".
HOW WILL THIS NEW PROVISION AFFECT YOU?
With this new Provision, adopted by the 44th Passenger Agent Conference of May 2022, Agencies that do not comply with PCI DSS or declare that they do not regulate Customer Credit Card transactions and regulate Customer Credit Card transactions will be assigned a Risk Event effective FEBRUARY 1, 2023.
• As of November 2022, you are receiving informative warning messages.
• If any of your location codes are still not compatible as of February 2023, or if you declare that you do not regulate credit card transactions and the customer is processing credit card transactions, you will be sent a warning message.
After the third warning message, a risk event will be assigned to your agent if any of your location codes are regulating customer credit card transactions. This Risk Event; will be recorded in your agent risk history for 12 months. (52 members received this warning. Check your message histories.)

You may check the table we shared in the images about the actions you need to do on the subject.
For your questions, please contact IATA via the "Customer Portal".

Airline Ticket Sales and IATA Specialization Presidency
Association of Turkish Travel Agencies
TÜRSAB