When merchants sign a agreement with a payment processor, they agree to be issue to fines should they are unsuccessful to keep up PCI DSS compliance. The information defense authorities, Functioning collectively in the European Facts Protection Board, should make sure that the info safety policies while in the EU https://www.nathanlabsadvisory.com/blog/nathan/building-an-effective-incident-response-team-roles-and-responsibilities/