PCI guides on mobile acceptance

The body that manages the Payment Card Industry Data Security Standard (PCI DSS) has published a fact sheet outlining how merchants can securely accept payments using smartphones and tablets. In the document (pdf) the PCI Security Standards Council points out that “mobile devices are not necessarily designed to be secure input or storage devices for cardholder data,” and that approved card readers, PIN pads and point-to-point encryption solutions may be required.