Accepting Payments Online: Drupal and PCI Compliance

The Payment Card Industry (PCI) has defined a number of Data Security Standards when accepting sensitive information such as credit card numbers over the web. While these are not Drupal-specific, they are important for any Drupal developer of site administrator of an e-commerce site to be aware of.

For information on achieving PCI compliance within your Drupal infrastructure, drupalpcicompliance.org has a Drupal PCI Compliance White Paper which gives a great overview of the issues, the levels of compliance set out by the PCI, how to identify which standards your site must comply with and how to achieve them.