BR-51-SG

In accordance with card payments security standards an invoice should never include a full card primary account number (IBT-087). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.

warning: reported, still valid

What the rule checks

As the rule set's publisher wrote it. The rule runs on every element the context matches, and fails where the test is false; the validator reports the line of that element.

PINT SG rules (Singapore) 1.4.1

Context

cac:PaymentMeans/cac:CardAccount/cbc:PrimaryAccountNumberID

Test

string-length(normalize-space(.))<=10

Checked with PINT SG Invoice, PINT SG Credit Note