EN 16931 rules › BR-51
BR-51 — In accordance with card payments security standards an invoice should never include a full card primary account number…
| Rule id | BR-51 |
|---|---|
| Rule set | EN 16931 itself, not a national or network addition |
| Severity | fatal in CII, warning in UBL; the wording below says which applies where |
| Applies to | the CII and UBL syntaxes |
| Checked by | the validator on this site and invoicekit.go v0.2.11, the library behind it |
The rule as published
In accordance with card payments security standards an invoice should never include a full card primary account number (BT-97). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.
fatal in CII — a validator enforcing this rule set rejects the invoice.
In accordance with card payments security standards an invoice should never include a full card primary account number (BT-87). At the moment PCI Security Standards Council has defined that the first 6 digits and last 4 digits are the maximum number of digits to be shown.
warning in UBL — flagged as non-conforming; a Peppol access point rejects warnings too.
What runs for it
Straight from the artefacts the engine embeds: the node the assertion selects and the test it applies there. A failing invoice is reported with the message above.
| Syntax | Severity | Artefact phase | Applied to | Fails when |
|---|---|---|---|---|
| CII | fatal | EN16931-model-phase | //ram:ApplicableTradeSettlementFinancialCard | string-length(normalize-space(ram:ID)) <= 10 |
| UBL | warning | EN16931model_phase | cac:PaymentMeans/cac:CardAccount/cbc:PrimaryAccountNumberID | string-length(normalize-space(.))<=10 |
Data elements it names
- BT-97 Document level allowance reason (cited by 4 rules)
- BT-87 Full card primary account number (cited by 1 rule)
See also
- Every EN 16931 rule id — the same list as a filterable table, with the assertions as CSV and JSON.
- What XRechnung and Peppol BIS add — rule sets that run these ids plus their own.
- The data elements — every BT and BG with the rules that name it.