3.2.3 The personal identification number (PIN) or the Examine data sources encrypted PIN block is not stored after authorization? including: Incoming transaction data All logs History files Trace files Database schema Database contents 3.3 Is the PAN masked when displayed (the six and last Review policies and procedures four digits are the maximum number of digits to be Review roles that need access displayed) such that only personnel with a legitimate to displays of full PAN business need can see more than the first six/last four Examine system configurations digits of the PAN? Observe displays of PAN Note: This requirement does not supersede stricter requirements in for displays of cardholder data—for example, legal or payment card brand requirements for point-of-sale (POS) receipts.
3.2.3 The personal identification number (PIN) or the encrypted PIN block is not stored after authorization? Examine data sources including: Incoming transaction data All logs History files Trace files Database schema Database contents 3.3 Is the PAN masked when displayed (the six and last four digits are the maximum number of digits to be displayed) such that only personnel with a legitimate business need can see more than the first six/last four digits of the PAN? Note: This requirement does not supersede stricter requirements in for displays of cardholder data—for example, legal or payment card brand requirements for point-of-sale (POS) receipts. Review policies and procedures Review roles that need access to displays of full PAN Examine system configurations Observe displays of PAN