Celebrating 20 Years

of helping to secure payment data worldwide!

We thank the payments industry for 20 years of community of collaboration that has helped to shape the advancements and evolution of payment security.

Celebrate 20 Amazing Years at a 2026 PCI SSC Event

North America
Community Meeting

15 – 17 September 2026
Vancouver, Canada

Europe
Community Meeting

20 – 22 October 2026
Edinburgh, Scotland

Asia-Pacific
Community Meeting

To Be Announced Soon!

Share your Favorite PCI SSC Memory!
Your memories may be featured here or at a PCI SSC event.

20 Year History of PCI SSC​

  • PCI SSC Founded

    Sep 2006

  • 1st Release of PCI DSS

    Sep 2006

  • PCI SSC Board of Advisors was seated with 31 members

    Jan 2007

  • First iPhone was released

    Jan 2007

  • Council hires 1st General Manager, Bob Russo

    Feb 2007

  • PIN-Entry Device (PED)

    Dec 2007

  • PA DSS 1.0 published

    Jan 2008

  • Mobile payment market reaches $69 billion in sales

    Mar 2009

  • Published Unattended Payment Terminals

    Apr 2009

  • Guidance on wireless security published

    Jul 2009

  • Square begins service

    Dec 2009

  • PCI DSS update lifecycle changes to three years

    Jun 2010

  • An eBay user purchases a $240k Mercedes-Benz via a smartphone

    Jun 2010

  • Council hires 1st European Director, Jeremy King

    Jul 2010

  • PCI DSS 2.0 published

    Oct 2010

  • Council hires Mauro Lance as COO

    Jan 2011

  • Guidance on tokenization

    Apr 2011

  • PIN v1.0

    Sep 2011

  • P2PE encouraged for mobile security

    Apr 2012

  • HSM v1.0

    Apr 2012

  • Best practices for mobile published

    Sep 2012

  • ATM Best Practices

    Jan 2013

  • Card Production Security Requirements

    Apr 2013

  • PCI DSS v3.0 released

    Nov 2013

  • Council hires 2nd General Manager, Stephen W. Orfei

    Jun 2014

  • Apples introduces Apple Pay

    Oct 2014

  • EMV technology indroduced

    Jan 2015

  • Android Pay and Samsung Pay become availble

    May 2015

  • PCI DSS 3.1 published

    Jun 2015

  • Tokenization Product Security Guidelines published

    Aug 2015

  • U.S. transitions to chip and PIN

    Oct 2015

  • TSP Security Requirements v1.0

    Dec 2015

  • 2,406 PCI Professionals & 9 PCI Standards Published

    Jan 2016

  • Internet of Things

    Feb 2016

  • PCI DSS 3.2 published

    Apr 2016

  • Massive DDoS attacks

    May 2016

  • Guidance for small merchants

    Jul 2016

  • Hackers demand Cryptocurrency as ransom

    Jul 2016

  • PCI SSC Issues Multi-Factor Authentication Guidance

    Jan 2017

  • Lance Johnson named Executive Director of the Council

    Jan 2017

  • Brazil REB and GEAR launched & PCI Software-Based PIN Entry on COTS (SPoC standard) release

    Jan 2018

  • PCI hosts inaugural ​India Forum ​

    Jan 2019

  • COVID-19 Pandemic

    Mar 2020

  • PCI SSC lauches Work from ome Security Awareness Training

    Jan 2021

  • 6.4 billion smartphone users worldwide

    Jan 2021

  • Supply chain disruptions caused by COVID-19

    Aug 2021

  • PCI DSS v4.0 released & MPoC Standards released ​

    Jan 2022

  • 15 standards published, PCI BoA expands to 53 seats, Principal PO level launched ​

    Jan 2023

  • Global purchase volume from the six top global payment brands reached a jaw dropping $28 TRILLION US Dollars (Source: Nilson Report)

    Mar 2023

  • Council Announces Gina Gobeyn, Executive Director, Diana Greenhaw, Head of Engagement, and Deanne Zettler, Head of Product & Technology

    Jan 2024

  • Estimated 791 billion global credit card transactions took place (Source: Capitol One Shopping Research Report May 2025)​

    Jun 2024

  • PCI BoA expands to 64 seats and seating Inaugural India-South Asia REB ​

    Jan 2025

Celebrating Bob Russo’s Legacy in Payments

Twenty years ago, payment brands worked together to launch the PCI Security Standards Council. The Council’s first Executive Committee recognized the need for external leadership for the Council—a General Manager to serve as the organization’s spokesperson and drive the operations of the organization. Many candidates applied for the role, but all agreed on the right person for the job—Bob Russo.

For many of the Council’s early years, Bob was the face of the PCI SSC. His stage presence helped turn the Community Meetings into “can’t miss” industry events, his outreach led to the growth of our Participating Organization program, and his vision led to the expansion of our training and standards programs. That’s why we feel such profound sadness to share the news that Bob passed away October 13, 2025, after a brave fight with cancer.

For those that knew him well, we will carry his memory with us forever. The best way we can honor him is to carry forward his passion for this community, his commitment to doing the right thing, and his relentless drive to make a difference.

Please join us in remembering Bob, and do keep his family—his wife Maria, his sons Anthony and Steven, his son Rob’s widow Yvonne, and their families in your hearts. And if you’re inclined, please help “Kick Cancer’s Ass” (in Bob’s words) by donating to the Jimmy Fund.

Join PCI SSC​

join-wide

Collaboration is at the heart of the Council’s mission to help secure payment data globally. Now there are even more opportunities for participation and collaboration with three levels of involvement: Principal Participating Organizations (POs), Associate Participating Organizations (POs) and Individual Participants.

join-image