I am researching and documenting a best practice for handling existing expired credit card data.
Our business (heavy e-commerce website) is migrating all existing data from one database to another and felt it was a good opportunity to do some house cleaning by removing expired credit card data.
I also see this as a good opportunity to put in place a good practice moving forward.
Here are some approaches or a combination that I have in mind: