About Pierre Coupet Expertise Can answer questions relating to Web Site Design, Web Site Hosting, Internet Marketing, E-Books, Web Site Promotion, Preparation of ezines, E-commerce tools ranging from merchant accounts to Internet gateways and web database solutions.
Experience I am the CEO and Founder of NetWEB Elite, formerly NetWEB Design & Hosting Services established in April 1997. I am also the founder and CEO of several other Internet related businesses.
Organizations Association of Internet Professionals
Education/Credentials Founder of NetWEB University,
Honorary Ph.D., Internet Marketing
NetWEB University, 1999
Expert: Pierre Coupet Date: 3/5/2001 Subject: Credit Card Number Storage
Question Dear Mr. Coupet:
I work for a small company that has a website. Customers can come to our site and compare the electricity rates of different companies that are offering service in their area. If a customer sees a company they would like to switch to, they can order the switch on our website. Sometimes, we are required to get a credit card number from the customer.
What is industry standard for storage of our customer's credit card numbers?
Any information or insights you might have will be greatly appreciated.
Sincerely,
Yvonne Thomas
Answer There are federal rules which regulate the means used to obtain the actual authorization info and the length of time that the original info itself (medium included)must be kept on file and available for inspection. It is designed to prevent or combat fraud by scam artists and unscrupulous operators charging customers' [or non-customers] credit cards without their consent.
Otherwise, I am not really aware of an industry standard for storage of the number.
There is however a privacy issue involved. In this case, it would be "Discard the info when there is no longer a requirement to have it and/or when the customer so elects."