October 8, 200818 yr I am creating a site that will be used to hold information about customers and their credit cards. I will not be storing or processing PAN (Primary account numbers) in any way, so I know PCI-DSS (Payment Card Industry - Data Security Standards) do not apply. But does anyone know of any regulations regarding storing customer data in a database? The Data Protection Act is a bit vague - I can't seem to find information regarding specifics. For instance, I've been told that if you are holding customer data it needs to be on a seperate server to the website. Is this true? Does anyone know of any specific documents / standards regarding storing customer information entered through the web? Any help would be appreciated. Thanks.
October 8, 200818 yr I'd reccmoned you read up on P3P (online data privacy policies) you can find all the required info @ W3C (http://www.w3.org) then you might have an idea of where to go from there
Create an account or sign in to comment