Skip to content
Cyber Compliance

GDPR → PCI DSS crosswalk

A control-by-control mapping between General Data Protection Regulation (EU 2016/679) and PCI DSS v4.0. 3 mappings.

GDPRPCI DSSRelationshipNotes
Art. 25
Data protection by design and by default
Req. 12
Support information security with organizational policies and programs
RelatedCurated
Governance & security policy
Art. 32
Security of processing
Req. 3
Protect stored account data
PartialCurated
Cryptography & data protection
Art. 32
Security of processing
Req. 4
Protect cardholder data with strong cryptography during transmission
PartialCurated
Cryptography & data protection

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.