Item - 2026.PA18.2

 The Board of Directors of the Toronto Parking Authority:

1. Directed that Confidential Attachment 1 to the report (February 24, 2026) from President, Toronto Parking Authority remains confidential in its entirety, as it involves the security of property belonging to the City or one of its agencies.

Eugene Ng, Partner, MNP Digital gave a presentation on Payment Card Industry Data Security Standard (PCI DSS) Compliance.

The purpose of this paper is to share with the Board the results of our annual Payment Card Industry Data Security Standard (PCI DSS) audit. Management can confirm to the Board that the Toronto Parking Authority has successfully completed its Payment Card Industry Data Security Standard (PCI DSS) attestation of compliance as a Level 1 Merchant — the highest and most rigorous tier of Payment Card Industry compliance. This achievement affirms that Toronto Parking Authority’s payment infrastructure, information security controls, and operational governance across our GreenP Parking, Bike Share Toronto, and Electric Vehicle (EV) Charging operations meet the most demanding global standards for the protection of cardholder data. 

The Toronto Parking Authority has now successfully achieved Payment Card Industry Data Security Standard attestation for six consecutive years of uninterrupted compliance. This sustained track record reflects managements continued efforts to maintain a culture of operating discipline, robust controls, and continuous improvements in our operating systems. This attestation is of strategic importance to the organization and is a foundational element of Toronto Parking Authority’s brand reputation in the marketplace. Our stewardship of consumer financial data information and security controls remains fundamental to our operating culture and commitment to our customers.