Are Annex Brands franchisees required to comply with PCI Data Security standards?
Annex_Brands Franchise · 2025 FDDAnswer from 2025 FDD Document
You must comply with various federal, state and local laws and regulations, including copyright laws that impact the operation of your retail center franchise. Examples include: (i) USPS Regulations, including certain forms and notifications to U. S. Postmasters, such as filing a USPS Form 1583 on each mailbox customer you service, and complying with certain customer return addressing requirements; (ii) laws requiring you to accept service of process for customers in some states; (iii) inspection of scales by the local and Federal Departments of Weights and Measures; (iv) laws and regulations governing offering notary services and any state laws that may require you to be subject to fingerprinting and a competency test; (v) regulations governing Internet auctions as set forth by any state or federal agency and eBay, Inc.; (vi) laws governing the shipment and transport of hazardous substances, alcoholic beverages, firearms, lithium batteries, food, plants, agricultural products and animals; (vii) regulations governing the transportation and handling of hazardous and dangerous substances and cargo; (viii) certain air cargo restrictions instituted under various Homeland Security-related laws; (ix) laws, regulations, industry standards, and PCI Data Security standards, as required for merchants that accept payment cards and, if applicable for flex retail centers, (x) laws and regulations by state and federal agencies for moving companies, including the U .S. Department of Transportation's Federal Motor Carrier Safety Administration; and (xi) licensing requirements, rules, and tariffs governing the transportation and delivery of household goods and general commodities, both in transportation domestically and internationally. Certain services, such as Western Union, also may require fingerprinting or a bond.
Source: Item 1 — The Franchisor and any Parents, Predecessors, and Affiliates (FDD pages 9–13)
What This Means (2025 FDD)
According to Annex Brands's 2025 Franchise Disclosure Document, franchisees must comply with various laws and regulations. This includes adherence to PCI Data Security Standards. This requirement applies to all Annex Brands merchants that accept payment cards. The FDD also specifies that flex retail centers must comply with these standards, if applicable.
Compliance with PCI Data Security Standards is crucial for protecting customer payment card data and preventing fraud. These standards involve implementing specific security measures, such as installing firewalls, encrypting data transmissions, and regularly updating antivirus software. Franchisees must stay informed about the latest PCI requirements and ensure their systems and processes meet these standards.
For a prospective Annex Brands franchisee, this means allocating resources for implementing and maintaining PCI compliance. This may involve costs for security software, hardware, and ongoing training for employees. Non-compliance can result in significant penalties, including fines, loss of payment card processing privileges, and damage to the franchise's reputation. Therefore, understanding and adhering to these standards is a critical aspect of operating an Annex Brands franchise.