PayPal Stories Archive

PayPal Update on Payment Card Industry TLS Mandate and Deadlines
 
Ensuring the security of our customers has always been a top priority at PayPal. For more than 18 years, we’ve been committed to keeping millions of people’s money secure online. As such, we are an advocate for and champion of critical payment industry standards and requirements, which enable us to better protect our customers’ payment transactions.
 
To even better protect our customers, PayPal will be rolling out scheduled security changes this year -- some of which require our merchants and partners to modify their integrations with us. Currently, we’re implementing security updates that support new industry mandates, including the Payment Card Industry (PCI) Council mandate to move to a newer TLS version, which provides a more secure path for transmitting information over the Internet. These industry-wide card and financial industry compliance requirements are meant to help ensure merchants and their customers are better protected from potential security risks.
 
Recently, the industry’s deadline to make these changes was extended; however, PayPal is asking our partners and merchants to take steps to modify their integration based on the original 2016 deadline, helping strengthen your protection and mitigating potential disruption to your service. 
 
We’re here to help you:
 
1.Understand these changes and how they impact you;
2.Fast track your compliance with these standards; and
3.Provide support and guidance throughout the process.
 
We’ve established a public PayPal microsite dedicated to providing you with additional information and resources. More specific information about the PCI Council’s mandate can be found here, and we’ve developed a whitepaper that outlines the technical details.
 
For those of you integrated with Braintree, they’ve announced their timeline for migration. Please be sure to check back for updates from them to ensure you’re complying with their requirements and deadlines.
 
At PayPal, security comes first and we remain committed to making sure our customers’ payment transactions and financial information are secure. Thank you for your help with keeping us all better protected – which is vital to safeguarding the trust our customers place in us.

John Nai, Chief Information Security Officer, PayPal

Stay up to date.

Sign up to receive the latest news to your email.

Subscribe