What does VISA and MasterCard define as “cardholder data”?
Cardholder data is any personally identifiable data associated with a cardholder. This could be an account number, expiration date, name, address, etc. The account number is the critical component that makes PCI DSS applicable. All personally identifiable information associated with the cardholder that is stored, processed, or transmitted is also considered cardholder data, however, PCI DSS applies even if the only data stored, processed, or transmitted is account numbers.
