Having been at a meeting today discussing a ePOS system, we were informed that new regulations were coming into play regarding storing of credit card information.
In my bid to find out more about these new regulations i came across some disturbing information that earlier this year Argos had been storing credit card numbers along with their card verification number inside source codes to customer emails. This seems to be a major breach of the PCI-DSS standard.
More to the point however changes do seem to be pending from the PCI council. The organization which deals with card securities has indicated nine new points are under consideration. The majority of the changes proposed however are for clarification purposes.
The link to the official release is below, if this applies to you feel free to have a look and prepare yourself for the next generation in security.
References
The Register
SearchSecurity.com
PCISecurityStandards.org
