What is the Bambu franchisee's obligation regarding PCI compliance?
Bambu Franchise · 2025 FDDAnswer from 2025 FDD Document
The Payment Card Industry ("PCI") requires all companies that process, store, or transmit credit or debit card information to protect the cardholders' information by complying with the PCI Data Security Standard ("PCI DSS").
Therefore, Franchisee shall be PCI compliant by following and adhering to then-current PCI DSS, currently found at www.pcisecuritystandards.org, or any similar or subsequent standard for the protection of cardholder data throughout the term of this Agreement.
Franchisee's Bambū shoppe shall be in compliance with PCI DSS at all times.
Source: Item 23 — Receipts (FDD pages 52–209)
What This Means (2025 FDD)
According to Bambu's 2025 Franchise Disclosure Document, franchisees are obligated to adhere to Payment Card Industry (PCI) standards. Specifically, Bambu requires franchisees to be PCI compliant by following the then-current PCI Data Security Standard (PCI DSS) throughout the term of their Franchise Agreement. The current PCI DSS can be found at www.pcisecuritystandards.org, or any similar or subsequent standard for the protection of cardholder data.
This means a Bambu franchisee must protect customers' credit and debit card information by adhering to the standards set forth by the PCI Security Standards Council. This includes implementing and maintaining security measures to protect cardholder data during processing, storage, and transmission.
Compliance with PCI DSS is an ongoing responsibility, and the franchisee's Bambu location must maintain compliance at all times. Failure to comply with PCI DSS could result in fines, penalties, and potential legal action, as well as damage to the reputation of both the franchisee and the Bambu brand. Franchisees should regularly review and update their security measures to ensure they meet the latest PCI DSS requirements.