Which of the following consequences would a retail chain most likely face from customers in the event the retailer is non-compliant with PCI DSS?

Question

Options

• AContractual impacts
• BSanctions
• CFines
• DReputational damage

• A
  2% (1)
• B
  2% (1)
• C
  5% (3)
• D
  91% (50)

Explanation

Reputational damage (D) is the correct answer because it is the consequence that flows directly from customers. When a retailer suffers a breach due to PCI DSS non-compliance, customers lose trust, stop patronizing the business, and spread negative word-of-mouth - all of which harm the retailer's reputation. The other options are genuine PCI DSS consequences, but they originate from the wrong parties: fines (C) and sanctions (B) are imposed by payment card brands (Visa, Mastercard) or acquiring banks, not customers; contractual impacts (A) arise from agreements between the retailer and its payment processors or card brands, again not customers. The question's phrase "from customers" is the discriminator - customers have no authority to fine, sanction, or enforce contracts against a retailer.

Memory tip: Ask yourself "what can an unhappy customer actually do to a business?" - they can walk away and warn others, which is reputational damage. Only institutions (card brands, banks, regulators) can levy fines, sanctions, or enforce contracts.

No community discussion yet for this question.