FAQ #1069: Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

FAQ #1069 Published Version: 2008-02-24T00:00:00+00:00

Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted by any media, including paper records. PCI DSS requirements 9.6 through 9.10 specifically address the safeguarding of paper records containing cardholder data.

View original on PCI SSC website View all versions Back to recent changes

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.