Nutcase
Active Member
- Joined
- Jan 29, 2005
- Posts
- 525
Come on they wouldn't even have to do that. They are using these cards to pay the ATO - the ATO already has the information on file, a good data geek would be able to run this report on their morning tea break.
The ATO does not hold the credit card payment data on those that have paid. PCI-DSS compliance requires either tokenisation or total masking. The processor of the transaction does this.