When Merchants sign a contract by using a payment processor, they agree to be topic to fines if they are unsuccessful to maintain PCI DSS compliance. The storage time period doesn’t seem to be proportionate to the objective of locating work for an individual during the short to medium expression. https://www.nathanlabsadvisory.com/eu-us-privacy-shield-gdpr.html