Sensitive cardholder data must not be sent to the Host in authorization or settlement messages, even if received from the card and terminal. If Portico receives this data, it will not be sent to the Host. The following will not be sent:
- 56 – Track 1 Equivalent Data
- 57 – Track 2 Equivalent Data
- 5A – Application PAN
- 5F20 – Cardholder Name
- 5F24 – Application Expiration Date
- 99 – Transaction PIN Data
- 9F0B – Cardholder Name Extended
- 9F1F – Track 1 Discretionary Data
- 9F20 – Track 2 Discretionary Data