The PCI Security Standards Council (PCI SSC) has welcomed a new cohort of Associate Participating Organizations to collaborate on PCI DSS standards evolution, program development, and worldwide payment data protection. These organizations will contribute technical expertise and industry insights to strengthen the future of payment security.
On October 13, 2026, the PCI Security Standards Council (PCI SSC) announced the addition of new Associate Participating Organizations to its global community. This expansion reflects the Council's ongoing commitment to fostering broad industry collaboration in the development and promotion of PCI security standards, including PCI DSS, PA-DSS, and related security frameworks.
Associate Participating Organizations play a vital supporting role within the PCI SSC ecosystem. Unlike Principal Participating Organizations—which typically include major payment brands and large merchants—Associate Participating Organizations represent a diverse cross-section of the payments industry, including technology vendors, security consultancies, managed service providers, and regional payment processors.
The PCI SSC formally welcomed the latest group of organizations accepted into its Associate Participating Organization program. While the Council did not disclose the full list of new members in this announcement, the expansion signals continued growth in the ecosystem of stakeholders actively contributing to payment security standards.
These organizations join hundreds of existing participants who collaborate through Special Interest Groups (SIGs), task forces, and feedback cycles on emerging payment technologies and threats. Their participation enables the Council to incorporate a wider range of real-world implementation perspectives into the standards development process.
The newly admitted organizations gain direct access to PCI SSC resources, including:
Current stakeholders benefit from the expanded knowledge base and technical expertise that new participants bring. A larger, more diverse participant community typically yields more robust standards that account for a broader range of deployment scenarios.
Organizations that must comply with PCI DSS ultimately benefit from standards refined through wider industry input. As Associate Participating Organizations contribute their implementation experiences, the resulting guidance becomes more practical and actionable for the broader compliance community.
The addition of new Associate Participating Organizations has several implications for PCI DSS compliance stakeholders:
A larger participant base means future revisions of PCI DSS are likely to incorporate perspectives from a more diverse set of environments—from small merchant point-of-sale systems to complex cloud-hosted payment architectures. Organizations should monitor upcoming RFC periods and standards updates that may reflect this expanded input.
Associate Participating Organizations often contribute to the development of supplemental guidance documents, information supplements, and best practice resources. Compliance teams should stay alert for new publications that may clarify specific PCI DSS requirements or address emerging technologies.
The Council's emphasis on worldwide payment data protection suggests continued focus on regional implementation challenges. Organizations operating across multiple jurisdictions should watch for localized guidance and resources that may emerge from this expanded participant network.
While this announcement is informational in nature, forward-thinking compliance professionals can take several proactive steps:
1. Monitor PCI SSC Publications: Subscribe to PCI Perspectives and other official channels to stay informed about new guidance, standards updates, and RFC opportunities that may follow.
2. Consider Participation: Organizations with relevant technical expertise or implementation experience should evaluate whether joining as an Associate Participating Organization aligns with their strategic goals. Participation offers early access to standards development and a voice in shaping payment security requirements.
3. Review Current Compliance Posture: Use this announcement as a reminder to review your organization's current PCI DSS compliance status, particularly if you handle payment card data across multiple environments.
4. Engage with Industry Peers: Attend PCI SSC Community Meetings and regional events where new participants may present case studies or share implementation insights.
The PCI SSC's continued expansion of its Associate Participating Organization program demonstrates the payment security community's sustained commitment to collaborative standards development. As the payments landscape evolves—with new technologies, channels, and threat vectors—robust industry participation remains essential to maintaining effective security standards. Organizations engaged in payment card processing should view this development as a positive signal for the ongoing maturation of PCI security standards and the resources available to support compliance.
An Associate Participating Organization is a company that joins the PCI Security Standards Council to support the development and promotion of PCI security standards, contributing expertise and implementation perspectives without being a payment brand or founding member.
Companies can apply through the PCI SSC website to become a Participating Organization. Eligibility typically requires alignment with the Council's mission, involvement in payment security, and commitment to contributing to standards development activities.
Benefits include early access to draft standards, participation in Request for Comments processes, engagement in Special Interest Groups, networking with payment security leaders, and a voice in shaping the future of PCI DSS and related standards.
PCI SSC announces new Associate Participating Organizations on a rolling basis, typically several times per year. The Council welcomes new members as applications are reviewed and approved to support ongoing standards development needs.
No, becoming a Participating Organization does not alter PCI DSS compliance obligations. Participation provides input into standards development and access to resources, but all entities that store, process, or transmit cardholder data must still comply with applicable PCI DSS requirements.
PoliWriter creates all the policies and documentation you need for compliance, customized to your organization. AI-powered, audit-ready, hours not months.
Get Started Free