Customer Registration & PCI Compliance

[lbohen]

Is this statement in ShopSite help regarding the retention of CC information still correct?

Once registered at your store, your customers can enter their shipping and payment information once, and ShopSite will remember it for future purchases. ShopSite can save several shipping addresses and payment methods for each registered customer, and the customers can view and edit that information as needed.

If it is correct today, given the new rules being considered in the future, will it continue to be correct?

[Jim]

The statement is correct currently, As for whether it will be correct for future versions will depend on what new rules are implemented..

The merchant has the option in the Commerce Setup > Customer Registration > Configure > screen, in the "Save Payment Information" section, to allow the shopper to choose if they want the store to keep their payment information or not. If the merchant checks "No" then the shopper won't have the option to save their payment info. If the merchant allows saving of information the shopper must also agree when the register or edit their account to have the store keep the payment information.

ShopSite will not save the payment info for the shopper unless 1) the merchant checks "Yes" to allow it and 2) the shopper checks yes to allow it.

Rules and regulations change so what will happen in the future is hard to say.

Note: If you are using the ShopSite security image (Orders > Security Security Status) if you are allowing shopper to save Payment information it will not give you the highest security level,