policy 0335 : Use of Payment Cards at the Medical Center

Cardholder data is “highly sensitive data” subject to the data security requirements of applicable University, Health System and Medical Center policies. The Medical Center is committed to protecting Cardholder Data from loss or compromise while it is stored on or transiting Medical Center information technology resources. Consistent with that commitment, the use of payment cards to collect funds, whether received directly or through a third-party, requires review and approval by the appropriate Medical Center executives and Departments before contracts are signed, Merchant accounts are obtained, or revenue resulting from payment card processing is received.