Common use of PCI-DSS Compliance Clause in Contracts

PCI-DSS Compliance. As applicable, Customer is responsible for ensuring that its use of the Cloud Service to store or process credit card data complies with applicable Payment Card Industry Data Security Standards (“PCI DSS”) requirements and shall not store credit card and social security data in the Cloud Service except in the designated encrypted fields for such data. During the Term, Oracle shall maintain PCI DSS compliance for those portions of the Cloud Service that are designated by Oracle as being designed to store and process credit card data. Any changes made to the Cloud Service by the Customer or at the Customer’s direction may affect the Customer’s compliance with PCI DSS requirements and Customer shall be solely responsible for ensuring that any such changes are compliant with PCI DSS requirements.

PCI-DSS Compliance. As applicable, Customer is responsible for ensuring that its use of the Cloud Service to store or process credit card data complies with applicable Payment Card Industry Data Security Standards (“PCI DSS”) requirements and shall not store credit card and social security data in the Cloud Service except in the designated encrypted fields for such data. During the Term, Oracle shall maintain PCI DSS compliance for those portions of the Cloud Service that are designated by Oracle as being designed to store and process credit card data. Any changes made to the Cloud Service by the Customer or at the Customer’s direction may affect the Customer’s compliance with PCI DSS requirements and Customer shall be solely responsible for ensuring that any such changes are compliant with PCI DSS requirements.

PCI-DSS Compliance. As applicable, Customer is responsible for ensuring that its use of the Cloud Service to store or process credit card data complies with applicable Payment Card Industry Data Security Standards (“PCI DSS”) requirements and shall not store credit card and social security data in the Cloud Service except in the designated encrypted fields for such data. During the Term, Oracle shall maintain PCI DSS compliance for those portions of the Cloud Service Services that are designated by Oracle as being designed to transmit, to process and to store and process credit card data. Any changes made to the Cloud Service by the Customer or at the Customer’s direction may affect the Customer’s compliance with PCI DSS requirements and Customer shall be solely responsible for ensuring that any such changes are compliant with PCI DSS requirements. Customer is responsible for ensuring that social security numbers and other sensitive data are only stored in the designated encrypted fields for such data.

PCI-DSS Compliance. As applicable, Customer is responsible for ensuring that its use of the Cloud Service to store or process credit card data complies with applicable Payment Card Industry Data Security Standards (“PCI DSS”) requirements and shall not store credit card and social security data in the Cloud Service except in the designated encrypted fields for such data. During the Term, Oracle shall maintain PCI DSS compliance for those portions of the Cloud Service Services that are designated by Oracle as being designed to transmit, to process and to store and process credit card data. Any changes made to the Cloud Service by or on behalf of the Customer or at the Customer’s direction may affect the Customer’s compliance with PCI DSS requirements and Customer shall be solely responsible for ensuring that any such changes are compliant with PCI DSS requirements. Customer is responsible for ensuring that social security numbers and other sensitive data are only stored in the designated encrypted fields for such data.

PCI-DSS Compliance. As applicable, Customer is responsible for ensuring that its use of the Cloud Remote Software Service to store or process credit card data complies with applicable Payment Card Industry Data Security Standards (“PCI DSS”) requirements and shall not store credit card and social security data (if applicable) in the Cloud Remote Software Service except in the designated encrypted fields for such data. During the Term, Oracle shall maintain PCI DSS compliance for those portions of the Cloud Service Remote Software Services that are designated by Oracle as being designed to transmit, to process and to store and process credit card data. Any changes made to the Cloud Remote Software Service by or on behalf of the Customer or at the Customer’s direction may affect the Customer’s compliance with PCI DSS requirements and Customer shall be solely responsible for ensuring that any such changes are compliant with PCI DSS requirements. Customer is responsible for ensuring that social security numbers and other sensitive data are only stored in the designated encrypted fields for such data.