title: recommendation or industry standard for the length of "time out" for web pages for Ecommerce businesses with Personal Identity Information?
body: <p>is there a Best Practice or industry standard for the length of "time out" for web pages for Ecommerce businesses with website containing Personal Identity Information?</p>