https://forum.productcart.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sun, 12 Apr 2026 02:49:05 +0000 Fri, 02 Dec 2011 22:34:40 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.productcart.com/RSS_post_feed.asp?TID=4886 https://forum.productcart.com/forum_images/pc_logo_50.png https://forum.productcart.com/ https://forum.productcart.com/pci-compliance-cardholder-data-on-invoice_topic4886_post18758.html#18758 Author: marlanbrando
Subject: 4886
Posted: 02-December-2011 at 10:34pm

Currently, ProductCartv4.5 prints out the following on both invoices and packing slips.

- At least the last 4 digits of the credit card
- Credit card expiration date
- Bill To address, which could be the credit card's name and billing address

According to the PCI compliance guide (http://www.pcicomplianceguide.org/pcifaqs.php),  "cardholder data is any personally identifiable data associated with a cardholder. This could be an account number, expiration date, name, address, social security number, etc. All personally identifiable information associated with the cardholder that is stored, processed, or transmitted is also considered cardholder data."

Thus, by the definition above, ProductCart is currently printing out cardholder data on invoices and packing slips since information such as expiration data, name, address and portion of the account number are always printed.  Since product orders may be shipping to gift recipients and not directly to the buyer, there becomes a problem with the cardholder data being also sent to these gift recipients.  This might be a PCI compliance issue for the merchants.  It is a good idea for the gift recipient not to receive any portion of the cardholder information anyways.  So for the "No,
I do not want card information printed on the invoice" option when generating the invoice and packing slip, all cardholder data should really be completely omitted from both the invoice and packing slip. 


]]> Fri, 02 Dec 2011 22:34:40 +0000 https://forum.productcart.com/pci-compliance-cardholder-data-on-invoice_topic4886_post18758.html#18758