FAQ #1069 Diff
Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?
Earlier Version
Later Version
Removed
Added
Yes, PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted on or by any media, including paper records. PCI DSS RequirementsRequirement 9.5 through 9.89 specifically addresses the safeguarding of physical media, including paper records, containing cardholder data.
(Note:Note: PCIThe DSSspecific Requirementsub numbersrequirement refernumber(s) toand PCIterminology DSSmay vary depending on the version 3)of the standard being used.
Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.