Editing Tokenization (data security) (section)

== Standards (ANSI, the PCI Council, Visa, and EMV) ==
Tokenization is currently in standards definition in ANSI X9 as [http://x9.org/wp-content/uploads/2014/01/X9-Tokenization-Webinar-January-2014.pptx%20 X9.119 Part 2]. X9 is responsible for the industry standards for financial cryptography and data protection including payment card PIN management, credit and debit card encryption and related technologies and processes. The PCI Council has also stated support for tokenization in reducing risk in data breaches, when combined with other technologies such as Point-to-Point Encryption (P2PE) and assessments of compliance to PCI DSS  guidelines.<ref>{{Cite web |url=http://democrats.energycommerce.house.gov/sites/default/files/documents/Testimony-Russo-CMT-Consumer-Information-Data-Breach-2014-2-5.pdf |title=Protecting Consumer Information: Can Data Breaches Be Prevented? |access-date=2014-04-01 |archive-date=2014-04-07 |archive-url=https://web.archive.org/web/20140407070258/http://democrats.energycommerce.house.gov/sites/default/files/documents/Testimony-Russo-CMT-Consumer-Information-Data-Breach-2014-2-5.pdf |url-status=dead }}</ref> Visa Inc. released Visa Tokenization Best Practices<ref>[https://usa.visa.com/dam/VCOM/global/support-legal/documents/bulletin-tokenization-best-practices.pdf Visa Tokenization Best Practices]</ref> for tokenization uses in credit and debit card handling applications and services. In March 2014, [http://www.emvco.org EMVCo LLC] released its first payment tokenization specification for [[EMV]].<ref>{{cite web|url=http://www.emvco.com/specifications.aspx?id=263|title=EMV Payment Tokenisation Specification – Technical Framework|date=March 2014|access-date=2014-11-04|archive-date=2016-10-14|archive-url=https://web.archive.org/web/20161014221023/http://emvco.com/specifications.aspx?id=263|url-status=dead}}</ref> PCI DSS is the most frequently utilized standard for Tokenization systems used by payment industry players.<ref name=":1" />