65192132_ted_to_Handling_Sensitive_Data__Examples
[Law/Regulation/ Standard] PCI or Credit Card Information Payment Card Industry Data Security Standards [Definition] Information related to credit card holder information as defined by the Payment Card Industry Data Security Standards. If you have to keep some record of the card used in transactions, use the last 4 digits of the number. [Data Steward/ Manager] University Treasurer treasury@umich.edu [Resources] U-M Merchant Services PCI-DSS [Examples] 
Cardholder name Account number Expiration date Verification number Security code... University of Michigan Treasurer's Office specifically states: "... Departments are not allowed to store electronically cardholder data on any university system. This includes, but is not limited to, computers, servers, laptops, and flash drives." See the Sensitive Data Guide: Credit Card or Payment Card Industry (PCI) Information for more examples.
University of Michigan | ITS | Safe Computing | Information Security Laws and Regulations Related to Handling Sensitive Data
Examples