C3 (2 points)
https://knobit.org/id/task/dcm-retention-metadata-rules/C3
Also as Turtle · JSON-LD · RDF/XML
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
|---|---|
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/task/dcm-retention-metadata-rules/C3 |
| rdfs:label | C3 (2 points) en |
| schema:hasPart | dcm-retention-metadata-rules C3: card transaction records under AML and the Accounting Act, the longer period applied |
| schema:hasPart | dcm-retention-metadata-rules C3: full card numbers kept 10 years on PCI DSS, cut under GDPR storage limitation |
| schema:identifier | C3 |
| schema:position | 3 |
| schema:text | Bank retention regimes, 1 each. (a) RT-03 card transaction records keep 5 years under AML only, but they are the source documents of card settlement postings and the Accounting Act (SRC-04) keeps those 7 years from the end of the financial year: the longer applicable period applied (P7Y from the end of the financial year, basis SRC-04 with SRC-03) with the precedence stated, or raised for a ruling. (b) RT-05 keeps authorisation logs with full card numbers 10 years on PCI DSS, which sets no period and asks to keep account data to a minimum: under GDPR storage limitation (SRC-01) the period is cut to what an applicable basis needs (5 years after the transaction under SRC-03, or a shorter period marked as the bank's proposal), or raised as an open question - not left at 10 years on PCI DSS. en |