Is it acceptable to store magnetic stripe data?
Full magnetic stripe data, also called “track” data, and other sensitive authentication data (see table below) are used during the transaction authorization process, but, per PCI DSS Requirement 3.2 must never be retained by you or your service providers subsequent to transaction authorization, even if encrypted. In addition to this PCI DSS requirement, the Visa and MasterCard Operating Regulations prohibit storage of the contents of a card’s magnetic stripe data as a unit.
