You can use access logs to evaluate accesses to payment card data.
You can evaluate accesses to payment card data using report RCCSEC_LOG_SHOW or transaction CCSEC_LOG_SHOW. To evaluate the access log, a user requires authorization for activity 71 of authorization object B_CCSEC.
Log records that are at least one year old can be deleted using report RCCSEC_LOG_DEL or transaction CCSEC_LOG_DEL. To be able to run the deletion report, the user needs authorization for object B_CCSEC with activity 06.