EDPB Guidelines on credit card data

Recommendations 02/2021 on the legal basis for the storage of credit card data for the sole purpose of facilitating further online transactions

The recommendations are designed to standardize the application of data protection rules in the context of the processing of credit card data. The focus is on the storage of credit card data by online providers of goods and services, particularly for facilitating future purchases by data subjects. The document addresses scenarios where a data subject inputs credit card information on a website or application for a one-time transaction, providing guidance on how this data should be handled and stored.