GMO-PG to start sales of JCI's tablets and lines from January for non-retention of credit card dataResponding to the non-retention of card information of mail order businesses
Started handling Japan Communications' dedicated tablet terminals and lines in January
~For March 2018, we will realize non-retention of card information when ordering phone calls, postcards, etc.~

GMO Payment Gateway, Inc. (TSE Part: Securities Code: 3769, President & Chief Executive Officer: Issei Ainoura hereinafter referred to as "GMO-PG"), which develops comprehensive payment-related services and finance-related services in the GMO Internet Group, is a Japan Communications Co., Ltd. (TSE part: Securities code 9424, President & Chief Executive Officer: Fukuda Naohisa Hereinafter referred to as Japan Communications) will start handling tablet terminals and lines for Credit card payment card information input that are compatible with the non-retention of card information of EC and mail order operators, around January 2018.
Non-face-to-face business operators (merchants) such as e-commerce and mail order that handle Credit card payment are required to comply with non-retention of card information ^(*1) or PCI DSS ^{(*2) by March 2018}. If you are an e-commerce or mail-order business operator that accepts orders by telephone, fax, postcard, etc., and you want to respond to non-retention of card information, you can use a dedicated tablet terminal that meets certain conditions ^(*3) to enter your card information and use a payment system that complies with PCI DSS.
GMO-PG will provide comprehensive support for non-face-to-face merchants by offering non-retention of card information non-passing-over settlement (*4) and a new dedicated tablet terminal and line, in addition to the ^(*4) that has been provided so far.

(*1) Do not "store," "process," or "pass" consumer credit card information (cardholder name, card number, expiration date, etc.) on the device or network owned by the merchant.
(*2) PCI DSS (Payment Card Industry Data Security Standard) is a global security standard for the credit card industry jointly formulated by five international credit card brands: JCB, American Express, Discover, MasterCard, and VISA.
(*3) The "Action Plan 2017" stipulates that one of the measures to deal with non-retention of card information is to use a dedicated tablet or line that meets the following conditions when entering card information: "The device is not owned by the member store," "There is no connection to the internal network," and "payment processing company The business operator has set or instructed the security conditions to be set."
(*4) A payment system that realizes non-retention of card information that allows non-face-to-face merchants to payment without touching the purchaser's credit card number.

In recent Japan years, in preparation for the 2020 Olympic and Paralympic Games in Tokyo, there has been a growing demand to improve the security environment for credit card transactions to an international level in order to improve the convenience and efficiency of payment through the spread of cashless payment. Under these circumstances, the "Act to Partially Amend the Installment Sales Act," which includes measures such as requiring each merchant to take measures to secure card information, is scheduled to come into effect by June 2018, and the "Action Plan 2017 ^(*6)" has been announced from "Credit Transaction Security Council ^(*5)" as a practical guideline.

The "Action Plan 2017" requires non-face-to-face business operators (merchants) that handle credit cards through e-commerce, mail order, etc., to comply with the non-retention of card information or PCI DSS by March 2018 under the "non-passing-over settlement". Of these, when receiving an order by telephone, fax, postcard, etc., storing the consumer's card information in paper media is "card information not retained", but entering the card information into the company's personal computer, etc. corresponds non-retention of card information to "card information retention". It is necessary to use services from external providers that comply with DSS (e.g., interactive voice response (IVR) payment systems, dedicated tablet terminals and lines, and BPO for card information entry operations) and use payment systems from payment processing company providers that comply with PCI DSS.

Therefore, in order to comprehensively support the non-retention of card information of e-commerce and mail-order businesses, GMO-PG has decided to start handling a new dedicated tablet terminal and line provided by Japan Communications in addition to the existing "non-passing-over settlement" by January 2018.

*5 Established in March 2015 with the participation of a wide range of businesses and Ministry of Economy, Trade and Industry involved in credit transactions.
(*6) Announced on March 8, 2017 "Action Plan for Strengthening Security Measures in Credit Card Transactions -2017-"

GMO-PG will be able to Japan eliminate the retention Credit card payment of card information without major changes in the current reception operation by simply replacing the computer that enters the consumer's card information with this dedicated tablet terminal when EC and mail-order businesses receive orders by phone, postcard, etc.
The card information input and payment are directly redirected to the management screen of the payment system provided by GMO-PG, and communication is also carried out on a dedicated line provided by Japan Communications, so the entered card information does not pass through the internal network. In addition, there is no need for additional system development because it provides a dedicated tablet terminal that has been configured to meet the security conditions required for non-retention of card information.

（URL：https://www.gmo-pg.com/service/mulpay/security/execution/）

In response to the content formulated in the "Action Plan 2017", GMO-PG provides payment systems for "Tokenization (*7)" and "redirect type (*8)" to realize the non-retention of card information of e-commerce businesses and merchants engaged in the mail order business, as well as providing multifaceted and multilayered countermeasures against fraudulent use and conducting educational activities such as seminars.

(*7) Replacing a credit card number with a token (a string of random alphanumeric characters) for payment processing.
(*8) After the purchaser enters the card information, the information transitions to the payment processing company operator's server and performs payment processing.

Japan Communications was established on May 24, 1996 as a company that realizes the policy of the Ministry of Internal Affairs and Communications to build the foundation of Japan's next-generation economy by utilizing the next-generation Internet enabled by mobile devices. Japan Communications' business model was later named MVNO, and in March 2009, under the Ministry of Internal Affairs and Communications' open mobile phone market policy, it realized interconnection with NTT DoCoMo. This led to the creation of "low-cost SIMs" and the creation of a market where mobile communications (SIMs) can be purchased from non-mobile carriers. Next, it's time for non-mobile industries to incorporate mobile into their services, and for the entire industry to grow by embracing it. As an MVNO rulemaker and the world's first MSEnabler, we are working to build a next-generation platform to play a role in creating an economy originating in Japan with a strong technical vision and high execution capabilities. The company is headquartered in Tokyo, Colorado and Florida, USA, and Dublin, Ireland, and is listed on the First Section of the Tokyo Stock Exchange (securities code: 9424). As a corporate governance policy of Japan Communications, the majority of outside officers are outside officers, and all outside officers are independent officers.

GMO-PG provides comprehensive payment-related services to 88,425 merchants (as of the end of June 2017 of the GMO-PG Group), including online businesses such as online shops and digital content, monthly fee-based businesses such as NHK and subscription, and public entity stores such as National Tax Agency and Tokyo.
With a focus on payment services, we provide value-added services such as web advertising services that contribute to improving the sales of merchants, finance-related services such as loans to financially support the growth of merchants, and overseas businesses such as the provision of overseas payment services, resulting in an annual Transaction value of more than 2 trillion yen.
GMO-PG aims to provide a safe and convenient payment for consumers and businesses, and to be the infrastructure for the payment process. As a leading company in the payment industry, we will continue to lead new innovations such as FinTech and contribute to improving the EC ratio of Japan.

Japan News Agency:

URL : http://www.j-com.co.jp/

GMO-PG Corporate Site URL :

URL :https://corp.gmo-pg.com/en/

GMO-PG Service Site URL :

URL :https://www.gmo-pg.com/en/