This is a reminder that postal employees must keep credit and debit card receipts in a separate and secure location (i.e., a locked vault). The receipts should be kept secure enough that only those with an official “need to know” have access to them.
With the growing concerns related to credit card fraud, the Postal Service™ is eager to comply with Payment Card Industry Data Security Standards (PCI DSS) and best practices for securing and protecting card data. To comply with these standards, all USPS® retail employees processing credit and debit cards must follow the existing credit and debit card receipt retention and disposal procedures. See Handbook F-101 Field Accounting Procedures, Sub- chapter 9-2, Credit and Debit Cards, online at http://blue.usps.gov/accounting/_pdf/HandbookF-101.pdf for these procedures. Part 9-2.5, Receipts Disposal Procedures, is given below for specific information.
Field units must dispose of credit and debit card receipts after the required 2-year retention period.
Units with on-site capability to shred documents must do so.
Units that do not have the capability to shred documents on site must do the following:
a. Submit the credit and debit card receipts to their servicing stamp distribution office (SDO) or stamp services center (SSC) for destruction.
b. Bundle the receipts and submit them by registered mail, following the normal scheduled return or destruction procedures, with a signed memo requesting that the receipts be shredded.
Note: SDOs and SSCs do not make any accounting entries in the Stamp Services System (SSS) for these receipts since they have no value.
— Payment Technology,
Finance, 7-2-09
