 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
RM Home > Additional Resources >
Purging Credit Card Data
Effective May 2010, the University Archives will not accept records that contain full credit card numbers. Any records containing cardholder data must be purged of full credit card numbers before they are transferred to the Archives.
In accordance with the University of Notre Dame Payment Card Policy and with the Payment Card Industry Data Security Standard (PCI DSS), University offices must limit storage of cardholder data to the minimum amount and time required for administrative and legal purposes. Appropriate retention practices are reflected in general and office-specific records retention schedules.
When records retention schedules indicate that records are to be transferred to the University Archives, an office must first redact all credit card numbers to not more than the first 6 and/or last 4 digits. Compliance with these procedures is essential due to the unique security requirements related to credit card information.
Please review the University's Payment Card Data Handling Procedures to ensure proper storage and disposal of cardholder data within an office unit. More information is available from the Notre Dame Credit Card Support Program.
This page was last updated April 18, 2011
