ssgumby - 5:58 pm on Aug 17, 2009 (gmt 0)

Here is the document, and here is an excerpt

[pcicomplianceguide.org...]

Q: What is defined as ‘cardholder data’?
A: Cardholder data is any personally identifiable data associated with a cardholder. This could be an account number, expiration date, name, address, social security number, etc. All personally identifiable information associated with the cardholder that is stored, processed, or transmitted is also considered cardholder data.

I agree, it seems totally nuts!