Rule · SAMA · 11 Jul 2019
The Saudi Arabian Monetary Authority directs all domestic banks and financial institutions to ensure that contracted merchants providing electronic payment services do not photograph, copy, or record confidential credit card information. This directive reinforces existing issuance and customer protection regulations by explicitly prohibiting merchants from capturing or storing sensitive card data during transactions. The requirement applies without prejudice to existing contractual agreements between financial institutions and merchants, mandating immediate compliance across all electronic payment channels.
In the Name of Allah, the Most Gracious, the Most Merciful Saudi Arabian Monetary Authority (SAMA) Headquarters
Banking Policy Department
Ref. No.: 67064 / 67
Date: 1440/11/08
Attachments: None
Circular
To: Respected Banks and Financial Institutions, Peace be upon you, and the mercy of Allah and His blessings.
Subject: Emphasis on Merchants Contracted with Banks and Financial Institutions to Provide Electronic Payment Services Not Photographing, Copying, or Recording Confidential Information on Credit Cards.
Reference is made to the regulations for the issuance and operation of credit cards and monthly charge cards, communicated via Circular No. 361000090389 dated 1436/6/26H, and the principles for protecting bank customers, communicated via Circular No. 341000095960 dated 1434/8/3H.
In light of observations that some merchants photograph credit cards, copy their data, and record confidential information thereon, the Authority hereby directs all banks and financial institutions operating in the Kingdom to ensure that contracted merchants providing electronic payment services do not photograph credit cards, copy their data, or record confidential information thereon, without prejudice to the provisions of the contractual agreement between the bank/financial institution and the merchant.
Yours sincerely,
Fahd bin Ibrahim Al-Shathri
Deputy Governor for Supervision
On behalf of / Hashim bin Uthman Al-Haqil
Deputy Governor for Affairs
Financial Sector
Distribution Scope:
P.O. Box 2992, Riyadh 11169, Telegram Address: Markazi, Telex: 404400, Tel: 4632000, Fax: 4662414
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
RegAlert holds no document that amends or replaces this one. This is not a check that it is in force: confirm with the regulator.
“Reference is made to the regulations for the issuance and operation of credit cards and monthly charge cards, communicated via Circular No. 361000090389 dated 1436/6/26H”
More like this from SAMA
We email you every new SAMA publication the day it's published.
Source: Saudi Central Bank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated