Controlled Unclassified Information (CUI) Program Security & Requirements Plan

Information related to credit, debit, or other payment cards. This data type is governed by the Payment Card Industry (PCI) Data Security Standards and overseen by the University of Michigan Treasurer's Office. Credit or debit card numbers cannot be stored in any electronic format without the expressed, written consent of the U-M Treasurer's Office. That office is responsible for the only PCI-compliant environment at the university.

If, for example, your unit is hosting a conference and needs to accept credit card payment for registration fees, contact the University of Michigan Treasurer's Office to arrange for this. You cannot handle the transactions using departmental computers.<\p>

Restrictions listed here do not apply to your own personal credit card information. However, it is recommended that you follow the same precautions with regard to your own personal information as you would with university data.