[Tangurena2]

The Payment Card Industry takes breaches deadly seriously. It is my opinion that any organization that collects PII should be held to the same standard (and penalties) that any organization that collects/processes credit card information.

https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Sec...