Financial Records & Data

Data Classification

---

These records are usually: sensitive*

* General financial information is sensitive, but any credit cards or account numbers are restricted. These records may contain or be combined with other information which may increase the risk and classification level. Context must be considered when assigning final classification.

Applicable Laws

---

Payment Card Industry (PCI): PCI SSC Data Security Standards Overview

Gramm-Leach-Blilely: UCOP Gramm-Leach-Bliley (GLB) Act Compliance (pdf)

Sec. 700-40: Policy on Credit and Debit Card Acceptance and Security

Responsible office / How to get help

---

ZotPortal: Credit Card Processing