Common use of Payment Card Industry Data Security Standards (PCI-DSS) Clause in Contracts

Payment Card Industry Data Security Standards (PCI-DSS). You will: (a) not store any element of the Transaction, other than temporarily to process the Transaction with the EMV PSP Service; this explicitly includes (but is not limited to) any Card numbers, CVV, CVV2, CVC2 or PVV information and any Track 2 Information derived from the chip or magnetic strip; (b) encrypt or obscure the Card numbers either by masking all digits except the first 6 and last 4 numbers; using the last 4 digits only or by applying a secure one way hashing algorithm such as SHA-1; and (c) not log any element of the Transaction for any purpose at all, including debugging or auditing and will not hold any other record of the Transaction electronically or on paper.

Payment Card Industry Data Security Standards (PCI-DSS). You will: (ai) not store any element of the Transaction, other than temporarily to process the Transaction with the EMV PSP Payment Processing Service; this explicitly includes (but is not limited to) any Card numbers, CVV, CVV2, CVC2 or PVV information and any Track 2 Information derived from the chip or magnetic strip; (bii) encrypt or obscure the Card numbers either by masking all digits except the first 6 and last 4 numbers; using the last 4 digits only or by applying a secure one way hashing algorithm such as SHA-1; and (ciii) not log any element of the Transaction for any purpose at all, including debugging or auditing and will not hold any other record of the Transaction electronically or on paper.