Credit/Debit Card Security Policies  

Departments that accept payments by credit or debit card are responsible for safeguarding the cardholder’s information and for reconciling the credit card revenue received. All staff must comply with the university’s credit/debit card policy and receive annual Payment Card Industry Data Security Standards (“PCI DSS” or “PCI”) compliance training.

For more information on the University’s overall PCI compliance program, please view a recording of the latest PCI Compliance Town Hall.

Please be advised that a representative from each department working with credit cards must complete the PCI compliance-required Self-Assessment Questionnaire (SAQ) annually in the CampusGuard Central Portal. To gain access to the portal, please send an to email pci-compliance@finance.rutgers.edu and include your NetID, Department, and Merchant ID(s).  Once granted access, you can follow these login instructions.

Failure to submit the relevant SAQ will result in the termination of the department’s ability to accept credit cards (merchant IDs will be suspended) until the SAQ has been submitted. SAQ walkthrough videos are available for those with Rutgers NetID access. 

Each merchant department must also maintain 

• a listing and inspection log of all credit card terminals and related equipment;
• local procedures for credit card security;
• an incident response plan; and 
• data flow diagram(s)

For any questions about PCI compliance, contact pci-compliance@finance.rutgers.edu.