Cardholder data (CD) is any personally identifiable information (PII) associated with a person who has a credit or debit card.
Cardholder data includes the primary account number (PAN) along with any of the following data types: cardholder name, expiration date or service code. A service code is a three- or four-digit number on cards that use a magnetic-stripe. The service code specifies acceptance requirements and limitations for a magnetic-stripe-read transaction.
If the cardholder name, expiration date and/or service code are stored, processed or transmitted with the PAN, they must be protected in accordance with Payment Card Industry Data Security Standards (PCI DSS) requirements.