3 ms·
What if you outsource the PII? For example use a payment processor and only store their reference. You can always go back to transaction in the payment processo
by yread 9y ago
What if you outsource the PII? For example use a payment processor and only store their reference. You can always go back to transaction in the payment processor in case of disputes, but you don't store the personal information.
- jacquesm 9y agoThen you will need a data processing agreement with that IPSP and they will need to prove to you that they are in compliance. The good news is that in that situation there is probably more knowledge and funding available to get things right (but it is obviously not a guarantee).