Did you miss PCI compliance?
Intuit didn’t miss a beat sending out final reminders to QuickBooks users who are processing payments using the Intuit systems. If you didn’t get an email, your clients still may have.
So what’s the buzz?
PCI compliance is not an option on Intuit systems and accountants shouldn’t treat it as optional at all.
Earlier this year the IRS made it mandatory for all tax practices to have a written security information plan, or a WISP. If you missed our "TaxTalk" on putting together a WISP for your practice, you can review it on our YouTube Channel for free. The slide deck includes places you can find free WISP checklists to ensure you’re in compliance.
PCI Compliance stands for payment card data compliance and is specific to protecting credit card information which your firm may, or may not have access to or stored in your client files.
The security standards for PCI compliance are stringent and involve a review of everything from your firm firewalls, to access to card information, to how you manage staff roles to protect credit card information.
Even if you don’t physically save card data like credit card numbers in your client files, simply having a payment processor like Intuit, or others, where your firm computers are used to access processor software holds you liable for protecting card information.
What’s the risks of not becoming PCI compliant? Compliance isn’t necessarily governed by law, but be careful that you don’t fall into an unknown insurance exclusion for failing to take the necessary steps to protect client card information.
Cybersecurity and other insurance coverage may require a PCI compliance due diligence on your part and failure to meet those requirements could result in a big bill if you have an issue or a data breach.
In addition to reviewing a PCI compliance checklist to ensure your firm is practicing good habits, also check in with your current payment processor about terms, conditions and what they offer for guidance. Without knowing it, you could inadvertently be paying more than you need to for your credit card processing as well.
Depending on how you take payment, meaning whether or not a client has to give you their information, you’re running a credit card, or clients can enter their own information, your fees raise and lower with the risk that you are storing card information. Gaining an education can help reduce your costs.
Non-compliance can also carry additional fees from your payment processor. Check in with them to understand what those fees may be and how you can go about completing a compliance checklist.
Keep in mind, you may need to get your IT team involved to address issues like firewalls, automatic password changes and other technology related safeguards.
Christine Gervais
Christine Gervais is a licensed CPA, using her skills to help businesses grow and achieve their fullest potential. Christine has a Master’s degree in accounting from Southern New Hampshire University in addition to holding her CPA license for over a decade. Notably, Christine is a nationally recognized speaker providing education to other CPAs on how to best serve clients as well as instruction on a wide variety of topics for business owners on how to maximize success. Christine prides herself on the value she can bring to clients with her extensive tax knowledge and providing strategic, forward-thinking financial strategies to help clients grow. When not behind her desk, you can find Christine spending quality time with her daughter and stepson or tending to the family’s excessively loved farm animals.