Barclays uses cookies on this website. Some cookies are essential to provide our services to you. Other cookies help us to analyse how you use the site, so we can improve your experience on our site. Cookies are stored locally on your computer or mobile device. Please select 'Accept all' to consent to cookies, or select ‘Reject all’ to reject all but essential cookies’, or select 'Manage cookies' to change your preferences. For more information visit our cookie policy.

Are acquirers considered service providers for the purpose of PCI DSS Requirements 12.8?

Barclaycard Payment Solutions (BPS) is an entity that acquires a merchant’s payment transactions, and is defined as an acquirer by payment Card Schemes. BPS is not considered, in its capacity as an acquirer, a service provider for that particular merchant’s PCI DSS compliance for the purpose of Requirement 12.8.