When retailers sign a agreement having a payment processor, they comply with be subject to fines whenever they are unsuccessful to maintain PCI DSS compliance. The information security authorities, Doing work collectively in the European Facts Protection Board, must make sure the data security guidelines from the EU are utilized https://www.nathanlabsadvisory.com/eu-gdpr.html