<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><P style="margin: 0.0px 0.0px 18.0px 0.0px"><FONT class="Apple-style-span" face="Arial" size="4"><SPAN class="Apple-style-span" style="font-size: 16px;"><BR class="khtml-block-placeholder"></SPAN></FONT></P><P style="margin: 0.0px 0.0px 18.0px 0.0px"><FONT class="Apple-style-span" face="Arial" size="4"><SPAN class="Apple-style-span" style="font-size: 16px;">"</SPAN></FONT>The state's <A href="file:///action/inform.do?command=search&searchTerms=U.S.+House+of+Representatives"><FONT class="Apple-style-span" color="#0022ED">House of Representatives</FONT></A> last week voted 139-0 in favor of a bill that would formally codify PCI requirements into a state law that merchants would be obliged to comply with if passed. Under HB 3222 a breached entity will have to reimburse banks and credit unions the cost associated with blocking and reissuing cards if the merchant was not PCI compliant at the time of the compromise. It also provides a safe harbor against such liability for companies who are PCI compliant and get breached. The proposal needs to win approval in the state Senate before it becomes law."</P><P style="margin: 0.0px 0.0px 18.0px 0.0px">"According to the language of the bill, "A business that, in the regular course of business, collects, maintains, or stores sensitive personal information in connection with an access device must comply with payment card industry data security standards." The bill would allow a financial institution in the state to request a breached entity to provide certification of its compliance with PCI specified controls. HB 3222 would require the certification to be issued by a PCI-approved auditor no earlier than 90-days before the breach."</P><P style="margin: 0.0px 0.0px 18.0px 0.0px"><A href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9019361&source=NLT_VVR&nlid=37">http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9019361&source=NLT_VVR&nlid=37</A></P></BODY></HTML>