FAQ #1069: Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

ℹ️

Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.

View Original →

FAQ #1069 Published Version: 2008-02-24T00:00:00+00:00

Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted by any media, including paper records. PCI DSS requirements 9.6 through 9.10 specifically address the safeguarding of paper records containing cardholder data.

View original on PCI SSC website View all versions Back to recent changes

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.