X9.119-1-2016 defines minimum security requirements when employing encryption methods to protect sensitive payment card data. For the purpose of this standard "protection" refers to maintaining the secrecy of the data from unauthorized disclosure. It applies to protection of the data from the point of encryption to the point of decryption, wherever those points may be in a given system.
