The Payment Card Industry Data Security Standard (PCI DSS) first came on the scene in 2005 as a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International, to help facilitate the broad adoption of consistent data security measures on a global basis. The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

To the extent that colleges and universities accept credit card payments for tuition, fees, conference registrations, or other services, institutions of higher education will have contractual obligations to fulfill the data security standards established by the payment card industry. Some colleges and universities have begun to consider the standards as a potential model for the handling of all types of sensitive data at their institutions and are exploring the extension of the standards to other types of information collected, stored, and distributed on campus networks.

To learn more about PCI DSS version 3.0,:


The Treasury Institute for Higher Education has been the focal point for helping colleges and universities to become PCI DSS compliant, hosting several workshops for the higher education community. In partnership with the National Association of College and University Business Officers (NACUBO), the Treasury Institute represent the business and financial interests of institutions of higher education. Additionally, information security officers and other IT staff from colleges and universities have attended the workshops and several institutions have been actively pursuing PCI DSS compliance for their institution.

The PCI Security Standards Council is an open global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. The PCI Security Standards Council’s mission is to enhance payment account data security by fostering broad adoption of the PCI Security Standards. The organization was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International.

For the latest PCI DSS news and information, visit the Treasury Institute's blog.

Recent Spotlight

  • The Promise of Virtual Reality in Higher Education

    The Promise of Virtual Reality in Higher Education

    Virtual reality teeters on the edge of becoming mainstream, with software development outstripping the hardware and memory storage needed. In this article, a librarian and an art historian discuss the many ways that VR may transform learning and student experiences.
  • Personalized Learning: What It Really Is and Why It Really Matters

    Personalized Learning: What It Really Is and Why It Really Matters

    The authors offer a framework—based on three years of campus visits—for thinking about (1) the circumstances under which personalized learning can help students and (2) the best way to evaluate the real educational value for products that are marketed under the personalized learning banner.

Browse PCI DSS