The GDPR imposes a lot of obligations on controllers of EU private information. Some obligations absolutely are a continuation of People set up by the 1995 EU Directive, but Many others are both new or expanded. Guard cardholder information. Organizations adhering to PCI DSS will have to secure cardholder details https://www.reddit.com/user/vciso-services-in-us/submitted/?sort=hot