Case Study on PCI DSS Compliance for Healthcare Payments

This case study details the implementation of the CardEasy Secure Voice Appliance by a major healthcare benefits management firm in the USA. The organization, which serves over 52 million members, faced challenges in achieving PCI DSS compliance for telephone payments. The solution provided allows contact center agents to securely capture payment card details during calls without exposing sensitive information. The system supports both touchtone and advanced speech recognition methods for inputting card details, ensuring that agents do not see or hear the payment information. The implementation process was expedited, with the solution operational within four weeks, significantly reducing audit costs and risks. The organization also plans to transition to a fully cloud-hosted contact center platform, for which CardEasy will provide support. Overall, the deployment has resulted in the contact centers being fully descoped from PCI DSS, enhancing security and efficiency in payment processing.