SB439-SA1,1,6
3"
(2) Retention of certain information prohibited. (a) No person that accepts
4an account access device in connection with a sale of goods or services may retain for
5more than 48 hours after the sale is authorized any of the following obtained from
6the account access device:
SB439-SA1,1,88
2. A personal identification number.
SB439-SA1,1,109
3. The full contents of any track of data from a magnetic stripe on the access
10device.
SB439-SA1,1,1311
(b) No service provider may retain any of the following obtained from an
12account access device in connection with a sale of goods or services after the sale is
13authorized:
SB439-SA1,2,22
2. A personal identification number.
SB439-SA1,2,43
3. The full contents of any track of data from a magnetic stripe on the access
4device.".