Consumer
PCIComplianceHubLast updated
An individual cardholder buying goods or services. The standard uses the word where it needs the person at the other end of a transaction, most visibly in Requirements 6.4.3 and 11.6.1, which are written about the consumer's browser.
Applies to. E-commerce merchants and their providers, wherever a page is judged as the consumer receives it.
Example. 6.4.3 governs scripts 'loaded and executed in the consumer's browser', and 11.6.1 the headers and scripts 'as received by the consumer browser'. The unit of measurement is what reached the shopper, not what the server sent.
Limits. A consumer is a cardholder in the act of purchasing; the Council keeps a separate entry for cardholder, the person a card is issued to. Nothing in the standard obliges the consumer; every obligation runs to the entity. A non-consumer user is the Council's term for an entity's own personnel and the accounts they hold.