PCI DSS v4.0.1 Global Payment Card Data Security Standard

Authentic statutory obligations decomposed into atomic machine-actionable conditions, actions, and verification standards.

Official Legal Text

Mediumobligation98% AI Match

Approved

Obligation Control 1: All primary account numbers (PAN) must be rendered unreadable anywhere it is stored using

All primary account numbers (PAN) must be rendered unreadable anywhere it is stored using strong cryptography with associated key-management processes. Cryptographic keys used for encryption of PAN must be rotated at least annually and protected against unauthorized access.

Required Actions & Enforcement

Action Type:VERIFY_POLICY_ENFORCEMENT

Trigger Conditions (AST Logic)OP: AND

statutory.clause_1.verifiedEQUALStrue