How do Visa® and MasterCard® define cardholder data?
A. Cardholder data is any personally identifiable data associated with a cardholder. This could be an account number, expiration date, name, address, etc. The account number is the critical component that makes PCI applicable. All personally identifiable information associated with the cardholder that is stored, processed, or transmitted is also considered cardholder data. However, PCI applies even if the only data stored, processed, or transmitted is account numbers.
