Personal Identification Numbers. (a) For each PIN-based Debit Card sale, Cardholder must enter a Personal Identification Number (“PIN”) through a PIN-pad located at the point of sale. (b) PIN-pad(s) must be situated to permit Cardholders to input PINs without a chance of revealing it to another individual, including Merchant or its employee(s). (c) Merchant will instruct employees not to ask any Cardholder to disclose a PIN and in the event Merchant or employee(s) nevertheless becomes aware of any Cardholder’s PIN, Merchant or employee(s) will not use such PIN or create or maintain any record of such PIN, and will not disclose such PIN to any other person. (d) Merchant must ensure the PIN message is encrypted, using a compliant encryption method, from the PIN-pad to the POS Terminal, and from the POS Terminal to the Debit Network and back (end-to-end). (e) The PIN encryption method considered compliant is the method mandated by the Card Associations, the Debit Networks and the PCI-SSC. (f) Merchant may only use a PIN entry device certified by Bank and listed as compliant by the PCI-SSC (including PTS and PCI-PED) for submitting PIN-Debit Transactions. Merchant will comply with any other requirements relating to PIN security as required by Bank or by any Debit Network, inclusive of PIN encryption method.
Personal Identification Numbers. (a) For each PIN-based Debit Card sale, Cardholder must enter a Personal Identification Number (“PIN”) through a PIN pad located at the point of sale. (b) PIN pad(s) must be situated to permit Cardholders to input PINs without a chance of revealing it to another individual, including Merchant or its employee(s). (c) Merchant will instruct employees not to ask any Cardholder to disclose a PIN and in the event Merchant or employee(s) nevertheless becomes aware
