PCI-DSS 3.2 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
PCI-DSS 3.2 reached end of life on 31 Dec 2018. It no longer receives security fixes.
2,778 days without security patches
Recommended action: upgrade to PCI-DSS 4.0.1. Support timeline
Official dates from the PCI-DSS release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 1 Apr 2016 | — |
| End of life | 31 Dec 2018 | 7.6 years ago |
| Latest release | — | final |
Where to go from 3.2
Recommended target: PCI-DSS 4.0.1.
The newest actively supported branch is PCI-DSS 4.0.1 (latest release ).
Frequently asked questions
Is PCI-DSS 3.2 still safe to use?
PCI-DSS 3.2 reached end of life on 31 Dec 2018, 2,778 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download PCI-DSS 3.2?
Yes — the final release (3.2) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade PCI-DSS 3.2 to?
Upgrade to PCI-DSS 4.0.1, the newest actively supported branch.