MADISON, Wis. -
The bill is similar to a measure drafted by CUNA Mutual Group and passed in Minnesota last year and making its way through the legislature in several states. It would enforce as law the PCI rules that require the destruction of all personal card information after a transaction. Currently, MasterCard and Visa enforce those rules. It would establish legal liability for costs to parties, such as TJX or BJ’s Wholesale Club, that are found to have been responsible for data breaches. Such costs could include notification to customers of a data breach, cancellation and reissuance of cards, and fraud losses caused by the breach.
Similar bills are pending in Congress but have been stalled, leaving the CU lobby to seek the measure on a state-by-state basis.











