Skip to main content
tapping discover card to pay

PCI Compliance Overview

The importance of PCI compliance

Maintaining the security of your transaction data is of the utmost importance. That’s why all Merchants, Service Providers, and Agents that process, store, or transmit cardholder data on Discover® Network are required to be PCI-compliant.

Maintaining the security of your transaction data is of the utmost importance. That’s why all Merchants, Service Providers, and Agents that process, store, or transmit cardholder data on Discover® Network are required to be PCI-compliant.

Hand holding a smartphone to make a contactless payment

Ensure the safety of customer data through PCI compliance

To report a data compromise or breach, call 1-800-347-3083.

Merchants that accept Discover Network:

  • Must comply with the Payment Card Industry Data Security Standard (PCI DSS) at all times.
  • May be required to validate and report compliance directly to Discover Network or to your third-party Acquirer.

Acquirers that process Discover Network transactions:

  • All Acquirers that store, process, or transmit Discover Network Cardholder data are required to comply with the PCI DSS.
  • May be required to validate and report compliance directly to Discover Network.
  • Must administer the DISC program and support secure payment card transaction processes.

Discover Network Information Security & Compliance (DISC) Program

The Discover Network Information Security & Compliance (DISC) program helps you promote compliance and meet the Payment Card Industry (PCI) security standards, which helps safeguard cardholder data and limit data compromises.

Learn More

Providing compliance documents

Merchants, Acquirers, and Service Providers must submit all PCI compliance documentation to Discover Network via email to DISCCompliance@discover.com or to the applicable compliance accepting entity via hard copy or electronically.

PCI compliance resources

Explore a wide range of resources to help Merchants, Acquirers, and Service Providers maintain PCI compliance.

Acquirer Compliance

Familiarize yourself with the compliance process and reporting requirements.

Card Production Vendor Compliance

Understand the compliance process and reporting requirements.

Service Provider Compliance

Determine your Service Provider Level, as well as your validation and reporting requirements.

Identify Your Merchant Level and Review Validation & Reporting Requirements

Determine your Merchant Level to find out your unique validation and reporting requirements.

PCI DSS Compliance Assessment

Perform a PCI DSS compliance assessment after determining your Merchant or Service Provider Level.

PCI Compliance Training and Tools

The PCI Standard Security Council (PCI SSC) has a variety of helpful tools for those preparing for the assessment.

Explore PCI assessment tools and training materials

two co-workers reviewing work

PCI tools and training materials

Explore PCI tools and resources designed to support your PCI DSS assessment, alongside training materials to help you better understand the compliance assessment process.

man at cafe on laptop

PCI merchant resources

Access Merchant Resources to help educate yourself on the relevance and importance of PCI compliance to secure payment data.

Contact our Data Security team

To report a data compromise or cardholder breach, call  1-800-347-3083. Or contact us for any compliance-related questions.

Contact Us