What entity dictates the enhancements and security requirements that Beverly Anns Cookie franchisees must implement for credit/debit card and electronic payments?

According to Beverly Anns Cookie's 2025 Franchise Disclosure Document, franchisees must adhere to the security standards set by the PCI Security Standards Council, LLC, or any successor organization. This council is the entity that dictates the enhancements, security requirements, and other standards for merchants accepting credit, debit, or electronic payments.

Beverly Anns Cookie franchisees are obligated to implement these standards, as well as any modifications or revisions made by the PCI Security Standards Council. This ensures that the franchisees' payment processing systems are up-to-date with the latest security protocols, reducing the risk of data breaches and protecting customer information.

Furthermore, Beverly Anns Cookie retains the right to reasonably specify additional security standards that franchisees must follow. This allows Beverly Anns Cookie to adapt to emerging threats and maintain a consistent level of security across all franchise locations. Franchisees must stay informed about these evolving requirements and promptly implement any necessary changes to their payment systems.

In practical terms, a prospective Beverly Anns Cookie franchisee should understand that compliance with these security standards is not optional but a mandatory part of operating the franchise. Failure to comply could result in penalties, legal liabilities, and damage to the franchise's reputation. Therefore, franchisees need to budget for the costs associated with implementing and maintaining these security measures.