An entity that receives and stores only truncated PAN does not need to consider this storage of cardholder data for the purposes of the SAQ eligibility criteria.Merchants must meet all …
Yes, encrypted cardholder data is considered cardholder data for the purposes of the SAQ eligibility criteria.Merchants must meet all the defined eligibility criteria for a particular SAQ in order to …