Concerned about the PCI DSS 4.0.1 lookback period starting in March of 2025? LEARN MORE

Are You Ready For PCI DSS v4.0.1?

get started

New Requirements For The Payment Card Industry Data Security Standard (PCI DSS v4.0.1) Take Effect 31 March 2025

Fuel and convenience retail merchants must meet the new PCI DSS v4.0.1 requirements for cybersecurity, IT policies and procedures, and card data environment (CDE) system configurations. Merchants who do not upgrade by the March 2025 deadline run the risk of significant penalties from their payment processors, inability to accept card transactions, or full assumption of liability for fraudulent card transactions.

Note: Retail merchants operating in branded environments, using a certified managed network service provider (MNSP), PA-DSS POS System, or who have upgraded to outdoor EMV are still responsible for meeting PCI DSS v4.0.1 requirements.

Get Your PCI
Preparedness Guide Now
Access Now
Key PCI DSS v4.0.1 changes include, but are not limited to, the following:
  • Authenticated vulnerability scanning of card data
    environment systems and networks
  • Physical security, inventory, and inspection requirements for payment devices (anti-skimming measures and more)
  • Automated cybersecurity monitoring of specified system
    and security events
Interested in referencing the source documents?
Resource Hub Click here to see the PCI Resource Hub