The Data controller decides the applications for which along with the implies by which own information is processed. The PCI Security Requirements Council was produced by these business players to ensure that transactions involving charge card figures are safe as you possibly can. The Council lays down various security standards https://www.nathanlabsadvisory.com/blog/nathan/effective-gdpr-compliance-solutions-in-the-uae/