§ 2-347. Credit and debit card payments; bank drafts.

(a)

In the event that credit or debit card payments made over the Internet are processed through a third-party service provider, such third-party service provider shall certify that it has an adequate identity theft prevention program in place that is applicable to such payments.

(b)

All credit and debit card payments made over the telephone or the city's website shall be entered directly into the customer's account information in the computer database.

(c)

The city employee accepting a credit or debit card payment made over the telephone shall create a written record of such payment, including the payment amount and credit or debit card number and city utility account. The credit or debit card payment shall be immediately processed through the city's credit and debit card terminal and entered into the city's utility and tax software. After the credit or debit card payment is processed through the city's credit and debit card terminal and entered into the city's utility and tax software, the written record shall be immediately destroyed. The city employee accepting a credit or debit card payment made in person at city hall shall not create any additional written record of such payment other than the receipt generated by the credit and debit card terminal. At the end of each day, all credit card and debit card receipts from that day shall be placed in a sealed envelope in the vault at city hall. Such receipts shall be shredded periodically, but no less than every 30 to 60 days.

(d)

Account statements and receipts for covered accounts shall include only the last four digits of the credit or debit card or the bank account used for payment of the covered account. The written record of credit or debit card payments made by telephone may include a full account number, but shall be immediately destroyed after the credit card or debit card payment is processed through the city's credit and debit card terminal and entered into the city's utility and tax software.

(e)

All records concerning the authorization to debit customer bank accounts for payment of utility bills shall be maintained in a secure location, which shall not be accessible to the public, and shall be accessible by key to only a limited number of specifically authorized employees in the finance department. The location shall remain locked.

(Ord. No. 2009-02, § 1(10-206), 5-4-2009)