diff --git a/specs/basic-card-payment.html b/specs/basic-card-payment.html
index 2531ba15..84e45817 100644
--- a/specs/basic-card-payment.html
+++ b/specs/basic-card-payment.html
@@ -210,6 +210,13 @@ <h2>BasicCardResponse</h2>
 		
       </dl>
 
+      <p class="issue" data-number="55" title="Should the messages support field-level encryption?">
+There is a requirement for payment apps to be able to return data that is
+hidden from the payee themselves (perhaps for PCI scope reasons) as they will
+pass it on to their payment service processor who can then decrypt it and use
+it.
+      </p>
+
       </section>
 
       <section>