Discussion

PCI DSS Compliance

I'm building an iOS app. I want to store a users' name and the last 4 digits of their CC number. I'll use those to match transactions I read from another API which also provides name and the last 4 cc digits.

If I'm just storing name + last 4 cc digits, do I have to comply by PCI DSS?

This thread sounds promising: https://stackoverflow.com/questions/44630367/is-last-4-digits-of-credit-card-and-expiry-date-storage-allowed-in-pci-dss but not sure how accurate or dated the info is.

1 points hockey_guy 1 year ago 4 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton