19473_Authority_Oct-opt

Should you miss your scan deadline, you may be hit with extra fees or lose the ability to accept payments altogether. If a data breach happens while you are non-compliant, you must follow all reporting requirements. Pennsylvania's Breach of Personal Information Notification Act requires entities, including municipalities, to notify affected individuals when certain personal information is accessed by an unauthorized party and the breach is reasonably likely to cause harm. A 2022 amendment set a stricter deadline for local agencies: notification within seven business days of determining a breach occurred, along with notice to the county district attorney within three business days. Authorities should confirm with their solicitor how these deadlines apply to their specific status as an authority. zŽƵƌ 'ƵŝĚĞ ĂƌƟĐůĞ ĐŽŶƟŶƵĞĚ ĨƌŽŵ ƉĂŐĞ ϭϰ͘ Note: While you are responsible for reporting a data breach whether you are PCI compliant or not, a breach during a period of noncompliance looks like negligence. Therefore, it may cause greater ripples in perception and long-term damage control for your municipality. What this means for your authority Your municipal authority should not be deterred from accepting payments online. Rather, you should take steps to ensure the security of your customers’ data through good cybersecurity. It may also help to partner with a web host who will advocate on your behalf. There are some instances where it is you versus the ASV, and if you do not know what you are talking about the ASV will surely win. Having a knowledgeable support system in your corner can help if your scans come back unfavorably. THE RIGHT MATERIAL. THE RIGHT PLACE. THE RIGHT TIME. Scan the QR code to find a location near you. www.lbh2o.com 100% Employee Owned 24x7 Emergency Service and Support. Not sure where to start? PMAA's education and training programs and the Annual Conference are good places to hear how other authorities have navigated PCI scans. AuthoritiesConnect is a good place to ask peers directly. PMAA has also been an active voice on cybersecurity policy for municipal authorities at the state level, testifying before the PA Senate's Local Government and Communications and Technology on your behalf. S ďŽƵƚ ƚŚĞ ƵƚŚŽƌ Jennifer Mariani serves as CEO of CourseVector, where she works with municipalities and small businesses throughout Pennsylvania. CourseVector provides website design, hosting, and marketing services, along with ongoing support to ensure accessible, reliable digital solutions.