In 2014, the Portland City auditor released a report stating the City was not in compliance with the standard with its handling of payment card transactions. Now, certified external assessors report that the City complies with the standard. Outsourcing payment card processing services, improving data security, and discontinuing some payment options for customers brought the City into compliance.
The City received more than 10 million payments using credit or debit cards last year for water and sewer services, Parks and Recreation classes or permits, and parking – including City-owned parking garages.
The industry standards for security apply to merchants, like the city, that accept credit or debit cards for payment. Failing tests in any of 12 sub-categories means the merchant fails to meet the overall standard. Portland was out of compliance for the previous seven years. Now that the City is in compliance, it will be tested each year by an outside assessor to make sure it continues to meet the standard.
News coverage of the audit
Koin 6 Portland promises it’s safe to use credit cards: City auditor discovered the city failed security requirements since 2009
Portland Tribune Coverage City improves credit card payment security, but work remains