Where in the Eos Worldwide FDD can I find information regarding PCI compliance?
Eos_Worldwide Franchise · 2025 FDDAnswer from 2025 FDD Document
[Item 23: RECEIPTS]
8.4 PCI Compliance.
If you accept credit card payments, you are required to maintain your credit card processing hardware and software in compliance with the Payment Card Industry ("PCI") Data Security Standard. It is your responsibility to maintain and report your PCI compliance, which encompasses operational policies and practices as well as networks and computer hardware/software used to process credit card transactions, as well as attesting that you are abiding by (i) the PCI Data Security Standard enacted by the applicable card associations (as they may be modified from time to time or as successor standards are adopted); and (ii) all other security standards and guidelines that may be published from time to time by payment card companies and/or enacted by law, and are applicable to customer credit card and debit card information. If you know or suspect a security breach, you must immediately notify both your credit card transaction acquirer and us. You assume all responsibility for providing notice of breach or compromise, along with duties and costs associated with fraudulent transactions, penalties, and ongoing fees for monitoring customer credit card histories and/or transactions for affected Clients of your Franchise.
Source: Item 23 — RECEIPTS (FDD pages 74–246)
What This Means (2025 FDD)
According to the 2025 Eos Worldwide Franchise Disclosure Document, information regarding PCI compliance can be found in Item 23, Receipts, specifically in section 8.4. If an Eos Worldwide franchisee accepts credit card payments, they are required to maintain their hardware and software to be compliant with the Payment Card Industry (PCI) Data Security Standard.
The franchisee is responsible for reporting and maintaining PCI compliance, including operational policies, practices, networks, and computer hardware/software used to process credit card transactions. This also includes attesting to abiding by the PCI Data Security Standard enacted by card associations and all other security standards and guidelines published by payment card companies or enacted by law.
Furthermore, the Eos Worldwide franchisee must immediately notify both their credit card transaction acquirer and Eos Worldwide if they know or suspect a security breach. The franchisee assumes all responsibility for providing breach notice, costs associated with fraudulent transactions, penalties, and ongoing fees for monitoring customer credit card histories for affected clients of their franchise.