Financial Records & Data
Data Classification
These records are usually: sensitive*
* General financial information is sensitive, but any credit cards or account numbers are restricted. These records may contain or be combined with other information which may increase the risk and classification level. Context must be considered when assigning final classification.
Applicable Laws
Payment Card Industry (PCI): PCI SSC Data Security Standards Overview
Gramm-Leach-Blilely: UCOP Gramm-Leach-Bliley (GLB) Act Compliance (pdf)
Sec. 700-40: Policy on Credit and Debit Card Acceptance and Security
Responsible office / How to get help
ZotPortal: Credit Card Processing