Maestro Global Rules (PDF) - MasterCard

Service Providers
14.6 Service Provider Registration
14.6 Service Provider Registration
14.6.1 Registration Requirements for DSEs, ISOs, and Type II
TPPs
Each Principal, for itself and each of its Sponsored Affiliates must use the
MasterCard Registration Program (MRP) system on MasterCard Connect to
register any Service Provider not designated by the Corporation as a Type 1
TPP. A Customer may elect to register a person as an SPRF for the purpose of
having that SPRF perform Service Provider registration requirements for DSE,
ISO, and Type II SPP Service Providers on the Customer’s behalf.
1. The Principal must submit all information and material required by the
Corporation in connection with the proposed registration within 60 days
of the registration application submission date.
2. A Service Provider performing TPP Program Service that also wants to
provide ISO Program Service to one or more Customers must be distinctly
proposed for registration by the Corporation on behalf of each Customer
that wants to receive Program Service from that Service Provider
3. A Service Provider that performs services involving the storage, transmission,
or processing of Card or Transaction data must comply with the MasterCard
Site Data Protection (SDP) Program in accordance with the implementation
schedule set forth in Rule 8.10.5 of this rulebook. Before initiating
registration, the Customer must instruct the Service Provider to contact the
Corporation via e-mail at sdp@mastercard.com and validate its compliance
with the SDP Program using the tools described in Rule 8.10.2 of this
rulebook. For any proposed Type II TPP that is not compliant, the
Customer or TPP must provide a Corporation-approved compliance action
plan. A Corporation-approved compliance action plan does not exempt the
Principal from responsibility and liability that arises from the Principal’s or
any of its Sponsored Affiliates’ or their Type II TPP’s noncompliance with
any Standard, including those relating to the disclosure and securing of
Card, Cardholder, and Transaction data. The registration of a proposed DSE
will not be deemed complete until its compliance with the SDP Program
is validated.
4. The Corporation collects the appropriate fee(s) then in effect from the
Customer that proposes the registration via the MasterCard Consolidated
Billing System (MCBS).
5. The Principal must receive the Corporation’s written or e-mail confirmation
of the registration before the Principal or any of its Sponsored Affiliates
receives Program Service from an ISO or Type II TPP or any of their Service
Providers or Merchants receive Program Service from a DSE and before the
Service Provider commences performing such Program Service or represents
itself to any person as authorized to provide such Program Service on behalf
of the Principal or any of its Sponsored Affiliates. In its sole discretion, the
Corporation may approve or may reject any application for the registration
of a Service Provider.
©1993–2012 MasterCard. Proprietary. All rights reserved.
14-14 9 November 2012 • Maestro Global Rules