Prohibits state agencies from holding cardholder data or other payment credentials on state data systems.

Requires state agencies that currently hold payment credentials to work with the office of the chief information officer to eliminate the data from state data systems.