The Payment Card Industry Data Security Standard (PCI DSS) was founded in 2006 as a joint venture by several of the leading credit card companies, including MasterCard, Discovery, Visa, American Express, and JCB International. The PCI DSS (currently at version 3.2.1) applies to all institutions, merchants, and businesses that accept, process, transmit, and store credit card information and associated details. The purpose of this standard remains solely to protect merchants, service providers, and consumers alike from financial and goodwill losses that may be sustained due to breaches of data security as it relates to credit cards and associated Personally Identifiable Information (PII).
According to the PCI DSS, cardholder data includes:
- The name of the cardholder
- The cardholder's account number
- The cardholder's service code ...