ssgumby - 5:50 pm on Aug 17, 2009 (gmt 0)

I don't have the specific document with me, but card holder data is ANY data on the card. I use First Data and was fined as I wasn't using the proper PCI questionairre. After arguing with them over and over that I didn't "store card holder data" they asked point blank if I stored first and last, without storing cc#. I said yes, of course I do. Their response was that first and last, as printed on the card, is card holder data even if I only transmit the cc#.

I too would consider it customer info, but my provider anyway sees it differently.

Trust me, I have been working on PCI and fighting with FD since Jan 1 2009 to get this all worked out. My cart scans fine, the questionairre and specific level is what is hard to pinpoint. They have me at the second to the highest which is nuts in my opinion.