While the implications of PCI DSS are broad, it can be brought into sharp focus as follows: no organisation taking card payments can retain sensitive authentication data, in any format, whether encrypted or not. Sensitive…

The obligations that PCI DSS compliance places on organisations taking card payments are very clear: it is a breach of PCI DSS for any organisation to retain sensitive authentication data, in any format, whether encrypted…