FAQ #1069 Diff

Does PCI DSS apply to paper with cardholder data (receipts, reports, etc.)?

Earlier Version
2022-08-16T00:00:00+00:00

Later Version
2022-08-16T18:10:00+00:00

Removed

Added

Yes, PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted on or by any media, including paper records. PCI DSS Requirement 9 specifically addresses the safeguarding of physical media, including paper records, containing cardholder data.

Note:data.Note: The specific sub requirement number(s) and terminology may vary depending on the version of the standard being used.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.