# Card data, call recording and disclosure

Lesson 3 of [Review voice agent risk and compliance before launch](https://voiceagents.fyi/academy/voice-agent-risk-and-compliance-review.md), 15 minutes.

Card payments and PCI DSS This part applies when the agent hears, stores or sends card numbers. The PCI Security Standards Council says that PCI DSS applies to entities that store, process or transmit cardholder data. - Decide first whether the agent should take card numbers at all. - If it does, as…

The rest of this lesson is for learners enrolled in the course. [See how Review voice agent risk and compliance before launch works](https://voiceagents.fyi/academy/voice-agent-risk-and-compliance-review.md).

Also on the [web page](https://voiceagents.fyi/academy/voice-agent-risk-and-compliance-review/cards-recording-and-disclosure).