An employee is taking a credit card payment over the phone, but the payment system has a temporary outage. To avoid inconveniencing the customer, the employee writes down the credit card number and expiration date on a notepad to be entered later. This is in violation of:
A) PHI.
B) PCI.
C) PII.
D) PGP.

Question

Quizplus · Accepted Answer

The Payment Card Industry Data Security Standard (PCI DSS) prohibits storing sensitive cardholder data like credit card numbers and expiration dates in an unsecured manner, such as on a notepad.

An Employee Is Taking a Credit Card Payment Over the Phone