Cardholder data exceeding the customer defined retention period must be purged (see PCI DSS Requirement 3.1). To purge old cardholder data, delete the Billling Account for customers that are no longer paying for services. This data must be deleted upon customer-initiated cancelation of services or after the automated suspend system has canceled a subscription.
Previous page
Next page
Locate page