Circular Regarding Compliance with Payment Card Data Security and Protection Standard No. (8202/1/10) dated 2016/6/15

In the Name of Allah, the Most Gracious, the Most Merciful

Number: 8302/1/10
Date: 1437/9/10 AH
Corresponding to: 2016/6/15 AD

---

Circular to Licensed Banks

Greetings,

I refer to Article No. (14) of the Instructions for Dealing with Customers with Fairness and Transparency No. (2012/56) dated 2012/10/31, and to our subsequent instructions on this matter, which require compliance with the Payment Card Industry Data Security Standard (PCI DSS) by obtaining a compliance certificate from a Qualified Security Assessor.

Please be informed that you may obtain the required compliance certificate and renew it through an external Qualified Security Assessor (QSA) if the number of annual transactions related to payment card data stored, transmitted, or processed through the bank's information technology infrastructure exceeds 300,000 transactions. For transactions below that threshold, you may obtain the compliance certificate through an Internal Security Assessor (ISA), emphasizing the necessity of continuing to update the certificate and providing the compliance report for the standard along with the compliance certificate upon each update.

Accept our highest respect and appreciation,

The Governor
Dr. Ziad Friez

---

P.O. Box 37 • Amman 11118 Jordan • Phone 4630301 • Fax 4638889, 4638624 • Website: www.cbj.gov.jo • Email: info@cbj.gov.jo

---