I have long said that
data rape is the second leading cause of identity theft problems. Most companies have no legitimate need to store your credit card numbers at all after the transaction is completed which may be why
Minnesota is now banning the practice of storing credit card information. The only problem here is that they put an arbitrary date on it instead of having it be "after the transaction is complete". This is a problem for some retailers that may not be able to process the transactions in 2 days or less, but it's still a pretty good start.
