Originally Posted by
Globaliser
But wouldn't you expect the method by which you paid for the ticket to be part of the booking record? It's the same if you turn up at check-in or the gate and you're asked for the card you used to pay for the booking as a security check (although that's now a relatively rare occurrence for established BAEC members, I think). The system can't easily do that either without being able to compare the number on the card to the number in the booking. I don't know whether the number in the booking is encrypted, but it surely can't be a surprise that it is stored in some form or other?
I'd have thought last 4 digits would be sufficient for those purposes.
I'm not sure I expect it to be retained for past bookings. Wouldn't the CC authorisation number be sufficient to most purposes with card issuer? What other circumstances would need the full card number to be stored?