Skip to content
Cyber Compliance

GDPR → PCI DSS crosswalk

A control-by-control mapping between General Data Protection Regulation (EU 2016/679) and PCI DSS v4.0. 3 mappings.

GDPRPCI DSSRelationshipNotes
Art. 25
Data protection by design and by default
Req. 12
Support information security with organizational policies and programs
RelatedCurated
Gouvernance et politique de sécurité
Art. 32
Security of processing
Req. 3
Protect stored account data
PartialCurated
Cryptographie et protection des données
Art. 32
Security of processing
Req. 4
Protect cardholder data with strong cryptography during transmission
PartialCurated
Cryptographie et protection des données

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.