PCI-PTS-POI
(PCI) The Payment Card Industry’s (PTS) Pin Transaction Security(POI) Point of Interaction are required for all businesses. While it addresses many different requirements, this section we are addressing the integrated accessibility and assistive use portions for compliance.
ADA and the PCI-POI requirements are to meet compliances for Federal Law and Card and PIN reader processing. Our POS dismount uses the POI A9 requirements paired with the required elements from the ADA for assistive use and are built into our dismount pos stand/mounting solutions.
Independently and securely accessing the POS reader using the ADA operable part U-shape pull handle and operation requirements, -ensures privacy and PIN entry privacy. Using our dismount, -a customer can now hold and use the device or set on the lap to achieve the requirements as the ADA and PCI POI intended.
The POI requirements began around the time the ADA update in 2010 happened for the 508 (ICT) and ADA Title III. Now in 2023, the U.S. Access-Board is providing a new update and is also addressing SSTM’s aka: self-checkouts and unattended such as Kiosks and ATM’s for ADA adoption as accessibility enforceable law. Building codes are in play too.
The latest PCI-POI update was September 2020 and continues using the adoption of the ISO 9564 for (PTS) PIN security and mgmt. This also addresses anti-shoulder surfing measurements and the ability for all customers to check for skimmers.
We realize businesses always do the bare minimum when it comes to ADA requirements and some actually prefer to be sued before including assistive and accessible equipment and we see this especially in the card processing industry sadly. This also adversely impacts ESG businesses.
One thing that the payments industry is relatively good with is the PCI requirements. POI A9 is required and not to be left out of daily processing use for customers. If you think the ADA fines are heavy, the PCI fines are much larger let alone you could lose your processing until remedied.
Payment Card Industry Security Standards Council (PCI SSC) is to ensure the security of payment data and the security of the payment infrastructure that processes that data.
PCI SSC is committed to building trust in the payment process and payment infrastructure for the benefit of all constituents. ADA components which are to be part of the POS usage regardless of a customer’s accessibility and privacy needs is required for POS-PED use at all times.
Along with the ADA.Gov who provides requirements for assistive use and accessibility needs, the combination of requirements fully addresses ease if use and privacy engagements for all persons.
Ultimately, it is up to the POS reader manufacturers, POS equipment providers and merchant services processors (ISO and MSP’s) to ensure assistive and accessibility requirements are presented to merchants for compliance.
As you can see in the illustration, the POS device is typically mounted in a locked-down or fixed position while in the ADA reach and range required setting. However, that does not alone meet the compliance requirements by any means.
A customer’s privacy and a business’s discrimination prevention are two of the most important things when it comes to the POS card and PIN checkout.
Businesses likely do not understand a person with assistive and accessibility needs that are not met, such as un-reachable POS and PIN readers is considered discrimination.
These issues pour more salt on the compliance wound by not allowing PIN entry privacy if a person uses their debit-only card or even with a visa /MC symbol wanting cash back and even a signature requirement.
This also affects Self-Serve, Kiosks and other unattended SSTM’s.
The coming 2023 rulemaking NPRM for the Americans with Disabilities Act (ADA) and the Architectural Barriers Act (ABA), located at 36 CFR part 1191 will include new guidelines for the accessibility of fixed self-service transaction machines, self-service kiosks, information transaction machines, and point-of-sale devices. The U.S. Department of Transportation and U.S. Department of Justice are expected, via separate rulemakings, to adopt these amended guidelines as enforceable standards for devices and equipment covered by the ADA. Contact us for more information.
