PCI SSC FAQ 1210 says Requirement 3.3.1 forbids keeping sensitive authentication data after authorization in any form, including digital audio recordings, so it should be suppressed at capture or securely deleted.

Checked 2026-10-02

Vendor
not restricted
Product
PCI DSS
Subsystem
Requirement 3.3.1
Deployment
multi-tenant, on-premises
Region
not restricted
Release range
FAQ dated June 2025
Checked
2026-10-02

Sources

Cite this note

APA

WarmTransfer. (2026, October 2). Agent screen recording in contact centers: source note agent-screen-recording-pci-faq-1210-audio-sad. WarmTransfer. https://warmtransfer.net/knowledge/claims/agent-screen-recording-pci-faq-1210-audio-sad

BibTeX

@misc{warmtransfer-claim-agent-screen-recording-pci-faq-1210-audio-sad,
  title  = {Agent screen recording in contact centers: source note agent-screen-recording-pci-faq-1210-audio-sad},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/agent-screen-recording-pci-faq-1210-audio-sad},
  note   = {Source note agent-screen-recording-pci-faq-1210-audio-sad, checked 2026-10-02}
}

Read in context