# BR-51-SG

Source: https://xmlvalid.com/rules/BR-51-SG

> In accordance with card payments security standards an invoice should never include a full card primary account number (IBT-087). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.

- Level: warning
- Rule sets: PINT SG rules (Singapore) 1.4.1
- Context: `cac:PaymentMeans/cac:CardAccount/cbc:PrimaryAccountNumberID`
- Test: `string-length(normalize-space(.))<=10`

Validate a document against these rules: https://xmlvalid.com/validate