Is compliance with the Payment Card Industry (PCI) Data Security Standard (DSS) Aira Fitness's responsibility or the franchisee's?
Aira_Fitness Franchise · 2025 FDDAnswer from 2025 FDD Document
Because you will accept credit cards, you will also have to comply with any general laws and regulations relating to the acceptance of credit cards, including the Payment Card Industry ("PCI") Data Security Standard ("DSS"). Compliance with the PCI DSS is your responsibility. You must also comply with data privacy laws that affectthe safekeepingofmemberinformation,andregulationsthat applyto electronicmarketing, like faxes, emails, text messaging and telemarketing.
Source: Item 1 — **THE FRANCHISOR AND ANY PARENTS, PREDECESSORS AND AFFILIATES (FDD pages 12–14)
What This Means (2025 FDD)
According to Aira Fitness's 2025 Franchise Disclosure Document, franchisees are responsible for Payment Card Industry (PCI) Data Security Standard (DSS) compliance. Because Aira Fitness franchisees accept credit cards, they must comply with all general laws and regulations related to credit card acceptance, including PCI DSS. Franchisees must also comply with data privacy laws concerning member information and regulations for electronic marketing.
This means that prospective Aira Fitness franchisees need to budget for and implement the necessary security measures to protect credit card data. PCI DSS compliance can involve costs for hardware, software, assessments, and employee training. Failure to comply with PCI DSS can result in fines, penalties, and potential legal action in the event of a data breach.
It is common in the franchise industry for franchisees to bear the responsibility for PCI DSS compliance, as they are the ones directly handling customer payment information at their individual locations. However, Aira Fitness franchisees should confirm with the franchisor what specific systems, vendors, or training programs are approved or required to ensure compliance with PCI DSS. Understanding these requirements upfront is crucial for budgeting and operational planning.