The GDPR imposes quite a few obligations on controllers of EU private facts. Some of these obligations certainly are a continuation of These established from the 1995 EU Directive, but others are both new or expanded. All corporations that course of action bank card data are essential to maintain PCI https://www.evernote.com/shard/s731/sh/f697c85e-6dab-6280-423c-f47d1d7271a7/lWvHWlOCvbDOBCIiRZKQ1XusRtOYoIpMxYZQ7ZXM8p1vJdMCVvr6eE_Tzw