Res09 14968 - Laserfiche WebLink

Browse Search

09/14/2009 ATTACHMENT 2 PROTECTING CONFIDENTIAL CREDIT CARD AND BANKING DATA Additional procedures followed by the Revenue Services Division that help to secure credit card and banking data submitted by customers include: • Ensure that office computers are password protected and that computer screens lock after a set period of time. • Keep offices clear of papers containing customer information. • Request only the last 4 digits of social security numbers. • Require (and keep) only customer information that is necessary for utility billing purposes. • Safeguarding sensitive customer information such as credit card account information. Credit card receipts generated during credit card payment processing only show the last four digits of the credit card number. Reports that contain full credit card information are secured in a locked area. Customers may access limited information about their utility account online. In order to access information online, customers must enroll in the automatic payment program, create a unique user identification and password, and use their utility account number. • Revenue Services Manager will ensure that service providers that receive and process utility account information have programs in place to detect and prevent identity theft. • Revenue Services Manager will adhere to a records retention schedule that allows secure retention for a reasonable period of time followed by destruction of customer information. PROGRAM ADMINISTRATION AND OVERSIGHT Responsibility for developing, implementing and updating this program lies with the Finance Director. The Finance Director will be responsible for 1) program administration; 2) reviewing any reports from staff regarding the detection of red flags; 3) identifying ways to prevent and mitigate identity theft; 4) determining which methods of prevention and mitigation should be taken in particular circumstances; and 5) considering periodic changes to the program. The Revenue Services Manager will oversee staff's daily activities and ensure appropriate training of the City staff to detect and respond to red flags. The Revenue Services Manger will create an annual report (April 30 of each year) which addresses the effectiveness of the program, documents significant incidents involving identity theft and related responses, provides updates related to external service providers, and includes recommendations for any material changes to the program. 14968 MUFF 205