PCI DSS compliance entails not only protecting customer data but also ensuring the right people access that data. Online merchant services require all credit card data to be accessible only by those who have received certification. A merchant services provider will also require access to mobile credit card processing data only on a need-to-know basis.