PCI DSS 4.0 becomes effective on March 31st, 2024. Some requirements go into effect immediately while the rest become mandatory by March 31st, 2025.

These requirements will change your approach to securing primary account number (PAN) data in your card data environment (CDE).

One of the most notable changes is to obsolete full-disk encryption. With 4.0, your data protection needs to cover additional threats and risk factors.