The city payment form already receives a processor token after card settlement, but the app still stores full card PANs in DynamoDB "for convenience." What is the correct data-minimization action?
Select an answer to reveal the explanation.
Short Explanation
If the processor already handed you a token, clinging to the full PAN is keeping the spare house key under the mat after the locksmith finished. Drop the PAN; keep the token.
Full Explanation
Data minimization means not storing sensitive cardholder data the application no longer needs after tokenization. Prefer payment-processor tokens or references and delete residual PANs. Replicating PANs into metrics, sharing weak encryption passwords, or printing PAN reports expands PCI scope and risk.