Merchants are a central focus in the SDP Program. Typically, merchants have access to and may store MasterCard account data. As such, the SDP Program is designed to ensure that this account data is stored in a secure fashion.
While all merchants are required to comply with the Payment Card Industry Data Security Standard, merchants that store, process or transmit MasterCard account data may also be required to validate compliance with their acquirer. Please note that for a merchant to be considered compliant, any Service Providers that store, process or transmit MasterCard account data on behalf of the merchant must also be compliant.