3.2.1 The full contents of any track (from the magnetic stripe Examine data sources including: located on the back of a card, equivalent data contained Incoming transaction data on a chip, or elsewhere) are not stored after All logs authorization? History This data is alternatively called full track, track, track 1, Trace files track 2, and magnetic-stripe data. Database schema Note: In the normal course of business, the following data Database contents elements from the magnetic stripe may need to be retained: The cardholder’s name, Primary account number (PAN), Expiration date, and Service code To minimize risk, only these data elements as needed for business. 3.2.2 The card verification code or value (three-digit or four-digit Examine data sources including: number printed on the front or back of a payment card) is Incoming transaction data not stored after authorization? All logs History Trace files Database schema Database contents 3.2.3 The personal identification number (PIN) or the encrypted Examine data sources including: PIN is not stored after authorization? Incoming transaction data All logs History Trace files Database schema Database contents
3.2.1 The full contents of any track (from the magnetic stripe located on the back of a card, equivalent data contained on a chip, or elsewhere) are not stored after authorization? This data is alternatively called full track, track, track 1, track 2, and magnetic-stripe data. Note: In the normal course of business, the following data elements from the magnetic stripe may need to be retained: The cardholder’s name, Primary account number (PAN), Expiration date, and Service code To minimize risk, only these data elements as needed for business. Examine data sources including: Incoming transaction data All logs History Trace files Database schema Database contents 3.2.2 The card verification code or value (three-digit or four-digit number printed on the front or back of a payment card) is not stored after authorization? Examine data sources including: Incoming transaction data All logs History Trace files Database schema Database contents 3.2.3 The personal identification number (PIN) or the encrypted PIN is not stored after authorization? Examine data sources including: Incoming transaction data All logs History Trace files Database schema Database contents
PCI_DSS_v3-1_SAQ_D_Merchant_rev1-1.docx