Subject: Final reminder: mandatory security compliance
From: <[email-masked]>
To: "Labor Law Poster Service" <[email-masked]>
Date: Thu, 04 Sep 2008 04:11:53 -0700

Dear Labor Law Poster Service,

As your Account Manager, I'm writing with an urgent reminder: Your business must be in compliance with online credit card processing security standards.

If you do not provide us your PCI certificate, we will need to disable your Website Payments Pro account until you do so.

----------------------------------------------------------------
What is PCI compliance?
----------------------------------------------------------------
The Payment Card Industry (PCI) mandates that you meet minimum online data security requirements. This means enrolling with a certified security vendor for PCI certification services consisting of:

1.  Quarterly security scanning of your office and store internet connections, as well as your website.
2.  Completion of a security self-assessment questionnaire.

For more information on this mandatory cardholder information security programs please go to:

Visa USA - http://usa.visa.com/business/accepting_visa/ops_risk_management/cisp.html

MasterCard - https://sdp.mastercardintl.com/cgi-bin/mainpage.cgi

----------------------------------------------------------------
How does my business become - and stay - compliant?
----------------------------------------------------------------
4 steps to staying PCI compliant:

1.  Complete and pass the annual security self-assessment questionnaire.
2.  Complete and pass quarterly security scans of your internet infrastructure.
3.  Get your certificate of compliance.
4.  Fax your certificate to PayPal at (402)951-0448.

----------------------------------------------------------------
What does PayPal need from your business in the next 15 days?
----------------------------------------------------------------
Please fax your certificate of compliance to: (402)951-0448.

--If you choose to enroll with ScanAlert please let them know you are a PayPal Merchant

----------------------------------------------------------------
PayPal's here to help - with cost-saving compliance resources.
----------------------------------------------------------------
-- We've contracted with ScanAlert, certified PCI vendor, to help our customers get in compliance at no cost for the first year.

--Enroll with ScanAlert online at: http//www.scanalert.com/

----------------------------------------------------------------
What if my business can't become certified within the timeframe you request?
----------------------------------------------------------------
You can prevent your Website Payments Pro account from being disabled by:

1.  Demonstrating a plan of action to become PCI compliant.
2.  Reply to this email with a plan of action within 7 days.
3.  After your initial request, you have 30 days to obtain your certificate of compliance.

----------------------------------------------------------------
Questions?
----------------------------------------------------------------
Write to us at [email-masked]

Thank you for your time and attention to this matter. As always, we appreciate your business.

(1) If you are not PCI-compliant, the Credit Card Association may impose fines of more than $500,000per event for data security compromises.

Keep in mind, if merchants experience a data breach, they are ultimately the ones held responsible for it.

Thank you for using PayPal!
The PayPal Team

----------------------------------------------------------------
PROTECT YOUR PASSWORD

NEVER give your password to anyone, including PayPal employees. Protect yourself against fraudulent websites by opening a new web browser (e.g. Internet Explorer or Netscape) and typing in the PayPal URL every time you log in to your account.

----------------------------------------------------------------

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link in the top right corner of any PayPal page.

PayPal Email ID PP1024