Beginning January 1, 2008, Visa will implement a series of mandates to eliminate the use of
non-secure payment applications from the Visa payment system. These mandates require
acquirers to ensure their merchants and agents do not use payment applications known to
retain prohibited data elements and require the use of payment applications that adhere to
Visa’s Payment Application Best Practices (PABP).

Listed below are Visa key dates including data security mandates and reporting deadlines.