Until very recently only larger technology companies in the travel industry supply channel have been required to have their systems validated by acquirers in accordance with PCI DSS guidelines. With Visa's recent announcement that from January 2017 even small OTAs, Channel Managers and Booking Engines will be effected. This means if a company does not have an accredited solution in place then they should start planning one immediately.