Is it illegal to keep credit card details

coolesticeking

briankelleher wrote: »

You'd think that, but we've never had a problem with someone stealing credit card details, even amongst 350 odd agents who take probably 35-40 credit card numbers each a day. If you're running police checks on all your employees (as we do), you weed out the people who'd be bothered with such fraud, or at least that's how it's worked out in practice.

I didn't mean the post to be aimed at your directly, it's more the fault of the company - but to be honest in this day and age, this is still not the correct way to be dealing with cardholders details to be honest with you.

And although i'm not saying you would do this personally, but it only takes 1 - If data of this kind if lost and used under new PCI rules you could be out of a job at the end of the day, I doubt anyone would wan't this.

I bet you take better precautions with your own personal data than this?

Also a police check means nothing - Kind of off topic but you have to be CRB checked to work in a nursery, but look what has happend in recent times. A police check does past history, does not mean they won't do anything like fraud in the future though.

You also said you scan the details and send these off to India - Are each of them CRB checked? What happens to the 'scan' does it go via unsecure E-Mail?

briankelleher

I wasn't taking it personally at all mate, not to worry. And yeah, it's not 100% perfect but you also have to put this in context - hundreds of thousands of people send us their credit card details in the post every month for us to enter into the system manually, and they get treated exactly the same - scanned into the system and sent to india for processing (and by sent I mean they all go onto a shared system that they can access on their side too). The fact is a lot of bills get paid this way, most companies will have a similar system, and the details that we write on paper when the system goes down get treated exactly as those sent in the post, and the amount of memberships involved is tiny compared to the members who send the details through the post.