Teleflora Point of Sales PA-DSS Implementation Guide
Cardholder Data Retention
Addresses:
PA-DSS 2.1.a
PA-DSS 2.7.b
PA-DSS 3.1
Dove POS retains the following Cardholder data in its database: Encrypted Credit Card number,
Encrypted Expiration Date, and Hashed Number.
Teleflora has provided a tool to Purge cardholder data from the Dove POS database, please see the appendix “How to Purge Cardholder Data” for details on this tool.
According to PCI DSS requirement 3.1, merchants need to create a data retention business policy.
Teleflora provides a template to help merchants develop this policy in the POS Template Policies document. Teleflora has also provided a tool to purge cardholder data from the Dove POS database.
Using the Tools>Support Tools>Purge Cardholder Data menu in DovePOS will purge cardholder data from your system based on your data retention limit. Please see the appendix “How to Purge Cardholder
Data” for more details on this tool. Cardholder data exceeding your defined retention period needs to be purged to be compliant with PCI DSS.
The Purge Cardholder Data tool creates a backup copy of your database prior to executing the cardholder data purge. Teleflora recommends that, after you have verified the purging of the cardholder data is complete, you use the Eraser tool to securely delete this backup copy of your database. See appendix “Using the Eraser Tool”.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 9