Version 10 is the official release incorporating PCI PA/DSS 2.0 certification. Visa/Mastercard requires periodic certification of software that processes credit cards to ensure that the software observes their strict controls and recommendations.
Arts Management Systems has enthusiastically participated in the PCI process since 2000. The Visa/Mastercard audit process requires defining the technology requirements for the version and testing many combinations. For venues, this may mean some minor upgrades to Postgres or Apache. However, most venues will already meet the requirements, especially if already running 9.24 or 9.25 as we steadily implemented these technology advances during the past year. |
|
YOU MUST ALREADY BE AT VERSION 9.25 TO UPGRADE TO VERSION 10.
If your database is not at version 9.25, please use Theatre Manager version 9.25 to upgrade the database before installing version 10. | |
For version 10, the technology audited in the PCI certification process is:
Note: Windows 2003 was audited for use yet is no longer supported by Microsoft (unless you have an extended support agreement with Microsoft). |
Upgrading to version 10.00 requires, at a minimum:
There are no significant feature changes in this version compared to 9.25. It is simply a PCI Compliance release to ensure minimum technology versions.
You must be running version 9.25 before updating to 10.
Point releases are minor version fixes and small enhancements to any particular version.
According to pages 8 and 31 of the CRTC CIO discussion document, the default must be so that the user takes action to opt-in to get marketing email. The default for the USA is that you can assume the person opts in without action. Note that the legislation does not affect items sent by the web listener as a result of buying things or requesting passwords. There are also mitigating factors for not-for-profit organizations; so you may want to read the legislation. (10.00.05)
The goal of the second generation listener is to lessen the need for the classic listener and eventually retire it. This list shows a summary what has been added to the second generation listener as improvement that are compatible with this release of TM. Note also, that the second generation listener is auto deployed, so you will just have these changes, regardless of the version of Theatre Manager you are running.
Please read Canada's Anti-SPAM laws in Bill C-28 and get your own legal advice on this Act. The interpretations below are our understanding of the Act and are not to be construed as a legal opinion, nor should they be interpreted as providing any protection from the proposed remedies in the Act.
Business processes and web forms in Theatre Manager should be configured to favour explicit OPT-IN under bill C-28, to provide as much protection to a venue and its Board of Directors as possible. |
|
Consent falls under two basic categories that are described further below:
|
There is legislation pending in Canada (Jul 1, 2014), the key parts of which are addressed (specifically OPT-IN) in the release notes for version 10.00.05:
Note that the legislation does not affect items sent by the web listener as a result of buying tickets or requesting passwords. There are also mitigating factors for compliance for not-for-profit organizations; so you may want to read the legislation.
Theatre Manager complies with the legislation's requirement of EXPLICIT OPT-IN for all new patrons for marketing purposes.
The current process is:
Instead please:
The opt-in process using one checkbox is a bit of a 'one checkbox kills all emails' to patrons. A feature has existed for a long time in the web sales process to allow patrons to add (or remove) themselves from any mail lists that you have allowed them to manage online. In all cases, this is an explicit opt in (and out) and the date that the patron added themselves can be viewed on the mail list tab on the patron window.
The SecondGeneration listener is being enhanced to make the process more versatile for you (the venue).
The process of a patron adding or updating their personal information online will become:
These existing mail list features in TM to provide a flexible way for patrons to tailor how they wish to be reached. For example, you can have multiple email lists that effectively mean:
You can
There appears to be provisions in the act for implicit right to email people