| |
 |
As a leader in consumer privacy protection, American Express has a long-standing commitment to protect Cardmember transaction and payment information, ensuring that data is kept private and secure.
Compromised data negatively impacts consumers, Merchants and card issuers. Even a single incident can severely damage a company’s reputation and impair its ability to effectively conduct future transactions. Addressing this threat by implementing Data Security Operating Policies can help improve customer trust, increase profitability and enhance a company’s reputation.
For over 40 years, Cardmembers have relied on American Express for the highest level of service and protection. In continuously addressing security issues, we have developed security operating policies to meet this need and are working with Merchants to help them establish appropriate security programs.
American Express knows that you share our concern and asks that you commit to the same high level of Cardmember protection by complying with the policies that follow, thus enabling your establishment to help provide the degree of security, privacy and data protection that our mutual customers expect and deserve.
The following sections outline American Express security operating policies. |
|
|
|
|
 |
|
General Security Standards
|
|
 |
Notification Duty to American Express |
|
Do's and Don'ts for Data Storage |
|
|
|
|
|
 |
|
Additional Security Standards for Conducting Online Transactions
|
|
|
Infrastructure Requirements |
|
Authentication Requirements |
|
|
| | |
| | |
| |
|
