Under what circumstances might a Canine Dimensions franchisee be required to undergo a PCI/DSS audit?
Canine_Dimensions Franchise · 2025 FDDAnswer from 2025 FDD Document
- 4.8.3 Franchisee agrees to comply with the then-current Payment Card Industry Data Security Standards as those standards may be revised and modified by the PCI Security Standards Council, LLC (see www.pcisecuritystandards.org), or any successor organization or standards that Franchisor may reasonably specify.
Among other things, Franchisee agrees to implement the enhancements, security requirements, and other standards that the PCI Security Standards Council (or its successor) requires of a merchant that accepts payment by credit and/or debit cards.
Franchisee must demonstrate compliance upon reasonable request, which may include having an independent third-party Qualified Security Assessor (QSA) conduct a PCI/DSS audit.
Source: Item 22 — CONTRACTS (FDD page 36)
What This Means (2025 FDD)
According to Canine Dimensions's 2025 Franchise Disclosure Document, a franchisee must comply with the Payment Card Industry Data Security Standards (PCI/DSS) as revised by the PCI Security Standards Council. This includes implementing security requirements for merchants accepting credit or debit card payments.
Canine Dimensions franchisees must demonstrate their compliance with these standards if reasonably requested by the franchisor. This demonstration may involve undergoing a PCI/DSS audit conducted by an independent third-party Qualified Security Assessor (QSA).
This requirement ensures that franchisees maintain adequate security measures to protect customer payment information. Failing to comply with PCI/DSS standards can result in fines, penalties, and potential legal liabilities for the franchisee. Therefore, it is crucial for prospective franchisees to understand and budget for the costs associated with PCI/DSS compliance, including potential audit expenses.