# Cardholder Data | Secureframe

> Learn what cardholder data includes (PAN, name, expiration, CVV), cardholder data environment (CDE) scoping, and PCI DSS requirements for protecting cardholder data.

canonical: https://secureframe.com/glossary/cardholder-data

The Payment Card Industry Security Standards Council (PCI SSC) established what cardholder data must be protected under PCI DSS.

## What is cardholder data?

According to the Payment Card Industry Security Standards Council (PCI SSC), cardholder data is defined as either the full Primary Account Number (PAN), or the full PAN plus any of the following elements:

- Cardholder name
- Expiration date
- Service code

Sensitive Authentication Data must also be protected under PCI DSS. This data includes: 

- Full magnetic stripe data
- CAV2
- CVC2
- CVV2
- CID
- PINs and PIN blocks