PCI Compliance

The University of Wyoming will take all reasonable efforts to ensure compliance with the current version of the PCI DSS and will remediate any non-compliance with due diligence. All card handling activities and related technologies must comply with the PCI DSS in its entirety. No activity will be conducted, nor any technology employed that might obstruct compliance with any portion of the PCI DSS.

Card handling activities must be conducted as described herein and in accordance with the standards and procedures listed in the Related Documents section of this Policy. The University will not process credit card information received via fax, email, or other end-user messaging technologies. The University prohibits the storage of electronic credit card information, in any format, on any system. All new or changed card activities and handling technologies and non-electronic storage of credit card information must be pre-approved by the PCI Chair.