Request for Comments: PCI Point-to-Point Encryption (P2PE) v3.2 Standard

From 6 February to 6 March, eligible PCI SSC stakeholders are invited to review and provide feedback on the draft PCI Point-to-Point Encryption (P2PE) v3.2 Standard during a 30-day request for comments (RFC) period.    

The RFC will be available through the PCI SSC portal, including instructions on how to access the documents and submit feedback. Eligible stakeholders will also receive instructions via email. As a reminder, participants are required to accept a Non-Disclosure Agreement (NDA) to download the document. Please review the RFC Process Guide for more information.    

Please note that PCI SSC can only accept comments that are submitted via the PCI SSC portal and received within the defined RFC period.    

Background on the PCI Point-to-Point Encryption (P2PE) v3.2 Standard 

A point-to-point encryption (P2PE) solution cryptographically protects account data from the point where a merchant accepts the payment card to the secure point of decryption. PCI SSC is simultaneously working on two efforts for the Point-to-Point Encryption (P2PE) Standard: 

1. A potential minor update (v3.2) to more expediently address stakeholder feedback from the previous v3.1 RFC in 2023. If you provided feedback on P2PE v3.1 as part of that RFC, please check the “Summary of RFC1 Feedback” document to see how your input was addressed.  
2. A major revision (v4.0) continues as planned. Most changes proposed for v3.2 will also be included in v4.0. Any feedback received that’s more suitable for a major revision will automatically be considered for v4.0 instead.