FAQ #1069 Diff

Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

Earlier Version
2014-05-28T00:00:00+00:00

Later Version
2022-08-16T00:00:00+00:00

Removed

Added

Yes, PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted on or by any media, including paper records. PCI DSS ~~Requirements 9.5 through 9.8~~Requirement 9 specifically addresses the safeguarding of physical media, including paper records, containing cardholder data.

(

Note: ~~PCI DSS Requirement numbers refer to PCI DSS version 3)~~The specific sub requirement number(s) and terminology may vary depending on the version of the standard being used.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.