I contacted the DVLA about this, who responded, “Please be assured that DVLA takes all aspects of external and internal security extremely seriously. The EVL Internet site complies with all recommended requirements and relevant security features, in order to protect our customers' data and payment information. Our system
incorporates the sophisticated features of secure online transactions that Internet users expect, along with controls as recommended by the payment card industry. Whenever a customer enters their debit or credit card details, the information is automatically protected using the Secure Sockets Layer (SSL) with 128-bit encryption. Staff at the Agency can neither access nor share this data. It may be of relevance if I mention that the DVLA network and systems are accredited in line with UK Government requirements for Restricted networks. Multiple tiers of protective countermeasures are in place to protect against electronic attack and malicious software. In addition, regular independent security checks are undertaken, in order to provide DVLA with assurance that the security countermeasures are effective and appropriate. Unfortunately, the wider Internet is not a secure place and information can be routinely collected or 'harvested' by unscrupulous individuals from personal computers where adequate security (anti-virus and spyware software) are not in place. I am sorry to learn of the concern that this matter has naturally created, but was pleased to learn that your reader made his bank aware of the situation so that they can fully investigate any, possible fraudulent activity, as this would have been the Agency's advised course of action. I hope that once your reader has full knowledge of the details, he will feel confident to continue using this award winning service
that millions now use, trouble-free, each month.”