What standards must the computerized point-of-sale system or credit card processing terminals at Auntie Annes comply with?
Auntie_Annes Franchise · 2024 FDDAnswer from 2024 FDD Document
You must ensure that your computerized point-of-sale system (the "POS System") or your credit card processing terminals (whichever are responsible for processing credit card transactions) are in compliance with the most current Payment Card Industry Data Security Standards ("PCI-DSS"). You also must comply with all applicable federal and state laws and regulations relating to the collection, use, and security of personal information and comply with any privacy policies or data protection and breach response policies we periodically may establish.
Source: Item 1 — THE FRANCHISOR AND ANY PARENTS, PREDECESSORS AND AFFILIATES (FDD pages 10–24)
What This Means (2024 FDD)
According to Auntie Annes's 2024 Franchise Disclosure Document, franchisees must ensure their computerized point-of-sale (POS) system or credit card processing terminals comply with the most current Payment Card Industry Data Security Standards (PCI-DSS). This requirement applies to whichever system is responsible for processing credit card transactions at the Auntie Annes location.
In addition to PCI-DSS compliance, Auntie Annes franchisees must also adhere to all applicable federal and state laws and regulations concerning the collection, use, and security of personal information. This includes complying with any privacy policies, as well as data protection and breach response policies that Auntie Annes may periodically establish. These policies are designed to protect customer data and maintain the integrity of the Auntie Annes brand.
For a prospective Auntie Annes franchisee, this means understanding and implementing the necessary security measures to protect customer data. Failure to comply with PCI-DSS and other data protection regulations could result in fines, penalties, and damage to the franchise's reputation. It is important to stay updated on the latest standards and policies to ensure ongoing compliance and data security.