Common use of Re-Validation Clause in Contracts

Re-Validation. Merchant must maintain a current, successfully completed SAQ and timely pass quarterly vulnerability scans, if applicable, in order to take full advantage of the PCI Program. A SAQ is no longer current if the Certificate of Validation issued by Processor to Merchant is more than one (1) year old. Merchant is also required to re-validate by completing a new SAQ and passing vulnerability scans, if applicable, when Merchant makes a change in Merchant’s processing environment or if Merchant fails to timely complete a required quarterly scan. 1. A change in Merchant’s processing environment requiring re- validation occurs when Merchant transitions from one card-processing environment to another such that Merchant’s SAQ Classification changes, necessitating re- validation under a new SAQ. With respect to a revalidation required due to a change in Merchant’s processing environment, Merchant must complete the re- validation process within twenty-four (24) hours of such change in order to maintain Merchant’s validation of compliance with the PCI DSS. 2. With respect to a re-validation required due to Merchant’s failure to complete a required quarterly Scan, Processor will deem Merchant’s failure to complete a Scan within ten (10) days of the end of the preceding quarter to require re-validation under the PCI Compliance Validation Process, in order to maintain Merchant’s validation of compliance with the PCI DSS. 3. With respect to a re-validation required due to the expiration of the annual SAQ or any other reason for which Re-Validation is required, Merchant will have five (5) days to complete the PCI Compliance Validation Process, in order to maintain Merchant’s validation of compliance with the PCI DSS. Once Merchant has successfully completed the re-validation of Merchant’s PCI DSS compliance, Processor will issue Merchant a new Certificate of Validation for the current validation period.