Unique Identifier (UID)
PCIComplianceHubLast updated
A distinct and non-reusable value assigned to a specific entity, such as a user, system, or device, to differentiate it from others. Unique identifiers can be used to track and manage access to cardholder data and help maintain PCI DSS compliance.
Applies to. Requirement 8 requires each user to be assigned a unique ID before they can access system components or cardholder data, and allows group, shared or generic accounts only on an exception basis, so every action on an in-scope system traces to one individual. Requirement 10 then has audit logs record that identifier against each auditable event.
Related. User Identification, Identification, Account, Authentication, GUID (Globally Unique Identifier)
Sources. PCI DSS v4.0.1 (June 2024)