PCI For Kiosks — PCI EMV Working Group

Last Updated on March 6, 2026 by Craig Allen Keefner

Quick Answer

PCI (Payment Card Industry) compliance applies to self-service kiosks, similar to point-of-sale terminals and ATMs. Kiosks must comply with the PCI Data Security Standard (DSS) to protect cardholder information from unauthorized access. The Kiosk Association is a PCI SSC participating organization, actively working to develop regulatory guidelines for unattended and semi-attended self-service kiosks. While achieving PCI compliance can be costly, it is essential to avoid potentially greater expenses and risks associated with non-compliance.

PCI For Kiosks Working Group

PCI EMV for Unattended

Payment Kiosk standard model by Olea

Payment Kiosk standard model by Olea

To try and develop unattended, semi-attended and attended regulatory guidelines regarding PCI and EMV in the self-service kiosk industry, we are now a PCI SSC participating organization with the main PCI regulatory body. One objective is to form a SIG or Special Interest Group regarding Unattended and Semi-Attended Self-Service. Regulations and practices vary across the United States and are also different internationally.

The idea is to develop “PCI for Kiosks” in same way KMA has done for “ADA for Kiosks”

PCI (Payment Card Industry) compliance does apply to kiosks. Just like point-of-sale terminals and ATMs, kiosks must comply with the PCI Data Security Standard (DSS). The purpose of PCI DSS is to protect cardholder information from unauthorized access. Although achieving PCI compliance can be costly and time-consuming, it’s essential because non-compliance can lead to greater costs in the long run. If you have specific questions about kiosk compliance, feel free to ask info@kioskindustry.org !

Resource and Related Links

More PCI Information

Credit Cards – PCI P2PE Validation – UCP

PCI EMV Kiosk 2019? EMV Compliance Kiosk

Frequently Asked Questions

1 Does PCI compliance apply to self-service kiosks, and why is it important?

Yes, PCI (Payment Card Industry) compliance applies to kiosks, similar to point-of-sale terminals and ATMs. Kiosks must comply with the PCI Data Security Standard (DSS) to protect cardholder information from unauthorized access. While achieving compliance can be costly, non-compliance can lead to even greater expenses.

2 How is the Kiosk Association involved in developing PCI and EMV standards for unattended kiosks?

The Kiosk Association is a PCI SSC participating organization working with the main PCI regulatory body. Their objective is to develop regulatory guidelines for unattended, semi-attended, and attended self-service kiosks regarding PCI and EMV. They aim to form a Special Interest Group (SIG) to address these standards, similar to their work on ADA for Kiosks.

3 What are the key considerations for achieving PCI compliance for kiosks?

Achieving PCI compliance for kiosks can be both costly and time-consuming, but it is essential to avoid greater expenses from non-compliance. Additionally, regulations and practices for PCI and EMV vary significantly across the United States and internationally, requiring careful consideration of local and global standards.

4 Where can I find more information or get specific questions answered about kiosk PCI compliance?

The Kiosk Association provides a "Resource and Related Links" section on the page with further information on PCI compliance, EMV, and payment security requirements. For specific questions about kiosk compliance, you can contact info@kioskindustry.org.