Authorised card operators will be allowed to store credit and debit card details but they won't be able to use the same for auto-checkout.