Benjamin Krueger wrote:

>http://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-=
>a-teen-girl-was-pregnant-before-her-father-did/

"Target assigns every customer a Guest ID number, tied to their credit
card, name, or email address that becomes a bucket that stores a history
of everything they’ve bought and any demographic information Target
has collected from them or bought from other sources."

Maybe not illegal nor unethical, but isn't this a violation of PCIDSS?
I thought card accepters were required not to keep card numbers. True?

Ok, so they convert the number to their own "Guest ID". But that would
be a one-time conversion unless they keep a map. And if they have a map,
isn't that keeping the card number?
-- 
Dave Close, Compata, Irvine CA      "A difference has to make a
[email protected], +1 714 434 7359    difference in order to be a
[email protected]           difference." --Wendell Johnson

_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to