Dear Vikas To be very frank, I even fail to understand the reply given by RBI. You had questioned compulsory storing of card details by websites and their potential mis use, and they are talking about terminals installed at merchants (acquired by banks in India ) for capturing card payments and following certain standards.
Besides, who is the issuing authority for those standards? To be very blunt, and going perilously public, let me say that RBI is not doing justice even to its stereotypical image of paper regulator. -----Original Message----- From: AccessIndia [mailto:accessindia-boun...@accessindia.org.in] On Behalf Of Vikas Kapoor Sent: Wednesday, July 27, 2016 5:50 PM To: AccessIndia: a list for discussing accessibility and issues concerning the disabled. Subject: [AI] Fw: Storing card details without the consent of the Buyers Hi Harish and all, this is what I got a response from the mail you suggested for making a complaint regarding saving the card details on certain website. I personally find it a very loose loose response. ----- Original Message ----- From: DPSS, Help To: dl.vi...@gmail.com ; bsvermad...@gmail.com ; manjunath...@rediffmail.com Sent: Wednesday, July 27, 2016 1:13 PM Subject: Storing card details without the consent of the Buyers " Dear Sir, Saving Card Details without the Consent of Buyers Please refer to your mail on the captioned subject. In this connection, it is being advised that Department of Payment and Settlement Systems (RBI) has issued instructions dated February 28,2013 which inter-alia advises that banks should ensure that terminals installed at merchants (acquired by banks in India ) for capturing card payments should be certified for PCI-DSS (Payment Card Industry- Data Security Standards ) and PA-DSS (Payment Applications- Data Security Standards). These security standards also address issues relating to handling and storage of essential card particulars. It is further advised that customers should also exercise caution while making on-line transactions and exercise the discretion and de-select the option to store card details, wherever available." DPSS,Help ________________________________ Caution: The Reserve Bank of India never sends mails, SMSs or makes calls asking for personal information such as your bank account details, passwords, etc. It never keeps or offers funds to anyone. Please do not respond in any manner to such offers, however official or attractive they may look. Notice: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this email by error, please notify us by return e-mail or telephone and immediately and permanently delete the message and any attachments. The recipient should check this email and any attachments for the presence of viruses. The Reserve Bank of India accepts no liability for any damage caused by any virus transmitted by this email. Register at the dedicated AccessIndia list for discussing accessibility of mobile phones / Tabs on: http://mail.accessindia.org.in/mailman/listinfo/mobile.accessindia_accessindia.org.in Search for old postings at: http://www.mail-archive.com/accessindia@accessindia.org.in/ To unsubscribe send a message to accessindia-requ...@accessindia.org.in with the subject unsubscribe. To change your subscription to digest mode or make any other changes, please visit the list home page at http://accessindia.org.in/mailman/listinfo/accessindia_accessindia.org.in Disclaimer: 1. Contents of the mails, factual, or otherwise, reflect the thinking of the person sending the mail and AI in no way relates itself to its veracity; 2. AI cannot be held liable for any commission/omission based on the mails sent through this mailing list.. Register at the dedicated AccessIndia list for discussing accessibility of mobile phones / Tabs on: http://mail.accessindia.org.in/mailman/listinfo/mobile.accessindia_accessindia.org.in Search for old postings at: http://www.mail-archive.com/accessindia@accessindia.org.in/ To unsubscribe send a message to accessindia-requ...@accessindia.org.in with the subject unsubscribe. To change your subscription to digest mode or make any other changes, please visit the list home page at http://accessindia.org.in/mailman/listinfo/accessindia_accessindia.org.in Disclaimer: 1. Contents of the mails, factual, or otherwise, reflect the thinking of the person sending the mail and AI in no way relates itself to its veracity; 2. AI cannot be held liable for any commission/omission based on the mails sent through this mailing list..