Timeline for Does transmitting first 6 and last 4 digits of the card number and expire date require PCI DSS compliance?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 29, 2018 at 15:07 | answer | added | Branden Miller | timeline score: 4 | |
| Sep 2, 2017 at 7:54 | answer | added | withoutfire | timeline score: 3 | |
| Sep 1, 2017 at 10:37 | comment | added | schroeder♦ | PCI DSS explains in detail when you need to comply. Have you read through their document? | |
| Sep 1, 2017 at 10:36 | history | edited | schroeder♦ | CC BY-SA 3.0 |
deleted 15 characters in body
|
| Sep 1, 2017 at 10:01 | answer | added | motosubatsu | timeline score: 4 | |
| Sep 1, 2017 at 7:20 | comment | added | Jeroen | I am not a QSA but I have done some PCI DSS assessments in the past. As long as the full credit card number does not flow and is stored in your system you should be good. Having said that, I think it's quite easy to guess the missing 6 digits. | |
| Sep 1, 2017 at 6:21 | review | First posts | |||
| Sep 1, 2017 at 7:01 | |||||
| Sep 1, 2017 at 6:21 | history | asked | Nilesh G | CC BY-SA 3.0 |