Discretionary Data
PCIComplianceHubLast updated
Additional issuer-defined data held in the tracks of a payment card magnetic stripe beyond the standard fields, including the card validation value CVV1 or CAV1. Because it carries that validation value, discretionary data forms part of Sensitive Authentication Data and must never be retained after authorization.