PCI SSC opens comment period on PCI DSS v4.0.1
The PCI Security Standards Council is requesting comments on the current PCI DSS v4.0.1 from 3 June to 20 July 2026. Eligible stakeholders can submit feedback through the PCI SSC Portal.
- Framework
- PCI DSS
- Who it concerns
- Eligible PCI SSC stakeholders
What changed?
Each point with the sentence from the source that says it.
Eligible PCI SSC stakeholders are invited to review and provide feedback on the currently published PCI Data Security Standard (PCI DSS) v4.0.1 during a six-week request for comments (RFC) period.
From 3 June to 20 July, eligible PCI SSC stakeholders are invited to review and provide feedback on the currently published PCI Data Security Standard (PCI DSS) v4.0.1 during a six-week request for comments (RFC) period.
Comments must be submitted via the PCI SSC Portal and received within the defined RFC period.
Please note that PCI SSC can only accept comments that are submitted via the PCI SSC Portal and received within the defined RFC period.
Participants are required to accept a Non-Disclosure Agreement (NDA) to download the document.
As a reminder, participants are required to accept a Non-Disclosure Agreement (NDA) to download the document.