PCI Mobile Payment Acceptance Security Guidelines For Developers, v.1.0

The September 2012 release of the Mobile Payment Acceptance Security Guidelines for Developers (the "Guidelines") by the Payment Card Industry Security Standards Council ("PCI SSC") should be of interest to providers of mobile payments services or applications. Although the Guidelines are directed to payment acceptance applications that reside on mobile devices (i.e., that are used by merchants to accept payment), they clearly indicate the PCI SSC's approach to integrating mobile payments with the existing PCI Data Security Standard ("PCI DSS") and the PCI Payment Application Data Security Standard.

The Guidelines are intended to help payment application developers and consumer electronic handheld device manufacturers design appropriate security controls within their software and hardware products. We've summarized a few important points below (bear in mind the measures are directed at mobile devices in the hands of merchants as payment acceptance devices – not