Section 454.100  Customer Records and Information

a)         The licensee shall ensure that authorizations received from customers, and all other applicable records, are retained for a period of not less than three calendar years after the calendar year in which they were created.

b)         The licensee shall preserve the confidentiality of its customers' data.