Credit Card Number Security
An excellent Jane Greig question today:
Q: Jane, can you please clarify the rule on business receipts containing full credit card numbers?
I understand that as of the first of this year its federal law that credit card numbers must be removed from business receipts except for the last four numbers. Is this true?
I have been to two businesses recently where the whole number has been on the store copy. I confronted management and they tell me that it’s OK to have the number on THEIR copy. Why would I need to be protected from having the number on MY copy? They seemed to be disinterested in complying with the law.
Questions: 1) What’s the answer to the above? 2) Who can a customer contact to report the business for not changing?
Regards,
S. L.
A: A business is allowed to keep the numbers on their copies of receipts.
The public’s understanding of the law is generally incorrect. I share your concerns. This law cuts down on theft of receipts left by consumers in trash cans and dashboards.
Here is the answer to a question similar to yours I answered this spring:
The law applies to stray receipts such as a customer’s copy. Retailers need to safeguard a customer’s information.
Merchants are allowed to keep a copy of the receipt with your complete credit card number on it, says Lauri Saathoff, deputy press secretary at the office of the Texas Attorney General. Note this law does not apply to transactions if the sole means of recording the card number is through a handwritten or imprint of the card, Saathoff says.
To report receiving a receipt generated after Dec. 31, 2005, with more than the last four digits contact the Attorney General’s Office, (800) 252-8011. Fine? Up to $500 for each calendar month during which a violation occurs.