To meet the PCI DSS requirement for annual compliance training, all departments designated as “merchant” departments must submit a list of employees and student workers who handle credit card data for enrollment. This includes anyone who interacts with customers, uses credit card terminals, or supports related back‑office processes and systems