Credit Card data in Incoming Payment -> Payment Means

Hi Experts,

My customer has entered unencrypted Credit Cards details on Incoming Payments (in the Payment Means screen).

In the UK it is illegal to store such info - how can this be removed?

Thanks

Greig