From: Alex Heney 
Newsgroups: comp.databases uk.finance uk.legal
Subject: Re: Storing customer bank/card details
Date: Sun, 04 Jun 2006 21:30:39 +0100

On Sun, 04 Jun 2006 14:19:46 GMT, jim@jibbering.com (Jim Ley) wrote:

>On Sun, 04 Jun 2006 14:10:06 GMT, Ronald Raygun
> wrote:
>>I'm not saying encryption would not be a wise thing to do, I'm just
>>disagreeing with the proposition that it would be "illegal" not to.
>
>Well it's certainly not illegal in that there's a law requiring it,
>however there is a law requiring appropriate levels of security, I
>would suggest that you're not going to convince a judge that not
>encrypting was appropriate, given how trivial it is.
>

Unless your systems are particularly vulnerable to physical theft, you
would have no difficulty whatsoever in persuading a judge that normal
processing is perfectly fine.
-- 
Alex Heney, Global Villager
Enough research will tend to support your theory.
To reply by email, my address is alexATheneyDOTplusDOTcom