Storing Direct Debit details in PHP/MySQL - Implications, is it even allowed?
I have a client who needs to be able to store their customers Direct Debit details (2k+ customers) on an existing online system that I previously built for them. For each customer it must store the full direct debit payment details. This basically means the sort code and bank account number, in addition to information already on the customer profile such as name and address.

My main concern here is security. I really dont feel happy about being responsible for peoples payment details, as I'm sure no developer would! 

I was wondering what the legal implications are, and if there are any viable alternative ways to store direct debit information maybe with a 3rd party using an API or something.

(I should note that this is UK based in pounds sterling, so any 3rd party must accept UK -> UK direct debit payments). 

The client has been using NatWest Bankline for processing the actual payments, and will continue to do so. The storage part is all that my system will be doing.

Many thanks
Storing Direct Debit details in PHP/MySQL - Implications, is it even allowed?
===

I have a client who needs to be able to store their customers Direct Debit details (2k+ customers) on an existing online system that I previously built for them. For each customer it must store the full direct debit payment details. This basically means the sort code and bank account number, in addition to information already on the customer profile such as name and address.

My main concern here is security. I really dont feel happy about being responsible for peoples payment details, as I'm sure no developer would! 

I was wondering what the legal implications are, and if there are any viable alternative ways to store direct debit information maybe with a 3rd party using an API or something.

(I should note that this is UK based in pounds sterling, so any 3rd party must accept UK -> UK direct debit payments). 

The client has been using NatWest Bankline for processing the actual payments, and will continue to do so. The storage part is all that my system will be doing.

Many thanks