The inability of the card industry's data security standards, on their own, to protect cardholder data has drawn fire from federal legislators impatient with the number and frequency of high profile card data security breaches.
In a reflection of the issue's steadily rising profile, the March 31 hearing was held before the House Homeland Security Committee's Subcommittee on Emerging Threats, Cybersecurity, and Science and Technology and the overall committee mood was one of dissatisfaction and criticism.
"I don't believe that PCI standards are worthless," said Rep. Yvette Clark, D-N.Y., who opened the hearing. "But I do want to dispel the myth once and for all that PCI compliance is enough to keep a company secure. It is not."
Recommended For You
Chief among the legislators concerns was the fact that two of the biggest breaches had taken place at retailers and processors which had been certified as compliant with data security standards.
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
