(1) In a credit or debit card transaction with a customer, a person may not create a customer receipt that shows more information about a customer than the customer’s name and five digits of the customer’s credit or debit card number.
(2) A person that creates or retains a copy of a receipt containing more information about a customer than the customer’s name and five digits of the customer’s credit or debit card number shall shred, incinerate or otherwise destroy the copy on or before the sooner of:
(a) The date the image of the copy is transferred onto microfilm or microfiche; or
(b) Thirty-six months after the date of the transaction that created the copy. [Formerly 646.888]
Section: Previous 646A.164 646A.166 646A.168 646A.170 646A.172 646A.200 646A.202 646A.204 646A.206 646A.210 646A.212 646A.214 646A.220 646A.222 646A.230 NextLast modified: August 7, 2008