Maestro Global Rules (PDF) - MasterCard

3.7 Provision and Use of Information
NOTE
Customer Obligations
3.7 Provision and Use of Information
Additional regional Rules on this topic appear in Chapter 17, “Europe Region,”
and Chapter 20, “United States Region” of this rulebook.
3.7.1 Obligation of a Customer to Provide Information
Upon request by the Corporation, and subject to applicable law or regulation,
a Customer must provide Customer Reports to the Corporation, or to the
Corporation’s designee: provided, compliance with the foregoing obligation
does not require a Customer to furnish any information, the disclosure of which
in the opinion of this Corporation’s legal counsel, is likely to create a significant
potential legal risk to this Corporation and/or its Customer(s). To the extent
that a Customer is obligated to provide a Customer Report to the Corporation
that the Customer deems to disclose proprietary information of the Customer,
such information will be treated by the Corporation with the degree of care
deemed appropriate by the Corporation to maintain its confidentiality.
As an example of a Customer Report, each Acquirer must provide Transaction
Data to the Corporation in such form and manner as the Corporation may
require. As used herein, “Transaction Data” means any data and or data
element or subelement that the Standards require to be used to process or settle
a Transaction (whether processed and/or settle via the Interchange System or
otherwise) or that the Corporation requires to be provided.
3.7.2 Confidential Information of Customers
A Customer must provide Confidential Transaction Data to the Corporation or >>
through the Corporation’s processes or systems solely as prescribed by the
Standards or as otherwise required by the Corporation or applicable law. For
example, a primary account number (PAN) must not be provided through the
Interchange System except as required by the technical specifications or other
Standards pertaining to the Interchange System or a component thereof.
The Corporation and its parents, subsidiaries and affiliates (herein collectively
referred to as the “Corporation’s Affiliates”) will not use or disclose confidential
information or Confidential Transaction Data furnished to it by Customers or
Merchants except to the extent that the use or disclosure is in compliance
with applicable law and as specifically provided herein. “Confidential
Transaction Data” means any information provided to the Corporation or any
of the Corporation’s Affiliates by a Customer or Merchant if that information
enables the Corporation or any of the Corporation’s Affiliates to determine an
individual’s identity or includes an Account number. The Corporation may use
and/or disclose confidential information and Confidential Transaction Data
only as follows:
1. for the benefit of the Customer supplying the information to support the
Customer’s Program and/or Activities;
©1993–2012 MasterCard. Proprietary. All rights reserved.
Maestro Global Rules • 9 November 2012 3-9