.

Herein, can merchants keep credit card numbers?

Writing down customers' credit card numbers on aregistration card is not a secure practice. All of the majorcard brands require merchants with a legitimatebusiness reason to store customers' card numbers tofollow what is known as the Payment Card Industry's DataSecurity Standard.

Similarly, what cardholder data can never be stored? On the other hand, sensitive authentication data cannever be stored, unless for the purposes of issues cards. Thecardholder's name, and expiration date can bestored without encryption. When considering the storage ofcardholder data, the PAN is the definingfactor.

Also to know, is it illegal to keep credit card information on file?

While there are no federal or state laws that makehaving copies of customer credit cards stored in an officeillegal, doing so can put you on the wrong end of the stickwith credit card companies.

What circumstances can payment card data be kept?

In general, no payment card data should ever bestored by a merchant unless it's necessary to meet the needsof the business. Sensitive data on the magnetic stripe orchip must never be stored.