What security standards must a Canine Dimensions franchisee comply with regarding payment card data?
Canine_Dimensions Franchise · 2025 FDDAnswer from 2025 FDD Document
- 4.8.3 Franchisee agrees to comply with the then-current Payment Card Industry Data Security Standards as those standards may be revised and modified by the PCI Security Standards Council, LLC (see www.pcisecuritystandards.org), or any successor organization or standards that Franchisor may reasonably specify.
Among other things, Franchisee agrees to implement the enhancements, security requirements, and other standards that the PCI Security Standards Council (or its successor) requires of a merchant that accepts payment by credit and/or debit cards.
Franchisee must demonstrate compliance upon reasonable request, which may include having an independent third-party Qualified Security Assessor (QSA) conduct a PCI/DSS audit.
Source: Item 22 — CONTRACTS (FDD page 36)
What This Means (2025 FDD)
According to the 2025 Canine Dimensions Franchise Disclosure Document, franchisees must comply with the Payment Card Industry Data Security Standards (PCI DSS) as revised by the PCI Security Standards Council. This means a Canine Dimensions franchisee must implement security requirements that the PCI Security Standards Council requires of merchants who accept credit and/or debit cards. The PCI Security Standards Council website is www.pcisecuritystandards.org.
Canine Dimensions franchisees must demonstrate compliance with these standards upon request. This demonstration may include an independent third-party Qualified Security Assessor (QSA) conducting a PCI/DSS audit. This audit would be at the franchisee's expense.
In addition to PCI DSS compliance, Canine Dimensions franchisees must also adhere to privacy laws and brand standards related to customer information. This includes maintaining reasonable safeguards for customer information and reporting any data breaches to Canine Dimensions immediately. Franchisees are also required to provide Canine Dimensions with information, reports, and audit results regarding data security policies upon request and allow access to their computer systems for audits.