This would be a PCI violation, so if it&#x27;s common, then someone has some calls to make.<p>I&#x27;m a stickler about enforcing data retention (and <i>non</i>-retention) standards where I work. We never store any credit card information. That would be an outrageous liability.