While the implications of PCI DSS are broad, it can be brought into sharp focus as follows: no organisation taking card payments can retain sensitive authentication data, in any format, whether encrypted or not. Sensitive…