Retailers Take Swipe At PCI Security Rules.

The article reports on an advice by David Hogan, chief information officer (CIO) of National Retail Federation (NRF), concerning data security in the U.S. Hogan advised credit card companies to stop forcing businesses to store card data to comply the Payment Card Industry (PCI) data security standard, which requires retailers to implement a set of prescribed controls for protecting cardholder data. Hogan asserted that retailers and others who accept payment card transactions do not need to comply with the PCI mandate. Thus, he suggested that credit card companies must take responsibility for storing card data by storing only an authorization code provided at the time of a sale for validation of a charge and a receipt with credit card information for future returns and refunds.