Level 3 On Devices

U9: Information designated Level 3 must not be stored on user devices, or portable media, unless the device or media is encrypted.

See also: Level 2, Level 3, U9, Users

How to Comply

Level 3 on encrypted devices only

Do not store Level 3 information on unencrypted devices. For more information on how to ensure that your devices are encrypted, see the checklist for encrypting your device type.