Specifies minimum requirements for protecting the personal identification number (PIN), used as a means of verifying the identity of a customer within an electronic funds transfer (EFT) network, against unauthorized disclosure, compromise, and misuse throughout its life cycle, and in so doing, to minimize the risk of fraud occurring within EFT systems.