At a minimum, cardholder data consists of which item?

• A. The full PAN
• B. Cardholder name
• C. Expiration date
• D. Service code

Answer: (A)

The key idea is that cardholder data is identified by the PAN—the primary account number. The PAN uniquely links to the card account, so having the full PAN by itself already constitutes cardholder data. The other fields—cardholder name, expiration date, and service code—are additional data elements that may accompany the PAN, but they don’t identify an account on their own. Therefore, at minimum, the item that defines cardholder data is the full PAN. Without it, the data isn’t tied to a specific card account, even if the other elements are present.