Point of Interaction PCI (POI)
Cashier and Cardholder Awareness – PCI and ISO 9564 | There is far more to how a POS terminal is mounted than meets the eye. At Taylor ADA, we went deep into all requirements for accessibility with the ADA, 508 (ICT), PCI and POI, VISA TADG, and ISO 9564. You will find no other mounting company in the world that has our expertise in ADA accessibility mounting for POS terminals and handhelds.
Accessibility Reminder
While the VISA TADG—Accessibility section is small, its impact is immense. Whether a business owner, an acquiring bank, ISO, MSP, card terminal manufacturer, or vendor, it is all subject not only to the ADA but is also an important part of the checkout.
2.6 Accessibility Requirements
Device vendors and acquirers are responsible for ensuring that all customer-facing devices adhere to any and all accessibility requirements for the countries in which they operate and for the countries in which the devices are installed.
POI PIN Entry Security
In the context of PCI compliance, "POI PIN entry privacy" refers to the security measures taken to prevent unauthorized viewing of a cardholder's PIN when they enter it at a Point of Interaction (POI) device, like a payment terminal, by utilizing features like physical shielding, limited viewing angles, or design elements that allow the user to obscure the PIN entry with their body or hand, ensuring privacy during the transaction process.
Example: A person using a wheelchair cannot reach the mounted POS terminal or hand-held's PIN pad or see the screen. The POS Terminal or Hand-helds must provide a way for the cardholder to use his/her body to PIN entry Shield the POS terminal or hand-held.
PIN Entry Privacy - ADA
Requirement A9 stipulates that the device must provide a means to deter the visual observation of PIN values as they are being entered by the cardholder. What methods are acceptable?
A: The POI Security Requirements provide options that may be used separately or in combination to provide privacy during PIN entry. For ADA accessibility and PIN entry privacy: These options are:
▪ A physical (privacy) shielding barrier. Note that in case the privacy shield is detachable, a user’s guide must accompany the device that states that the privacy shield must be used to comply with ISO 9564. Optionally, the user’s guide can also reference PCI device requirements;
▪ Designed so that the cardholder can shield it with his/her body to protect against observation of the PIN during PIN entry, e.g., a handheld device;
It's Abusive.
ADA CHECKOUTS WORK.
