Federal regulators are increasingly asking tougher questions about the protection of consumer data. The Payment Card Industry Data Security Standard is critical for best practices. Regulators may turn to the PCI-DSS as a complementary standard, but it’s not something regulators can enforce. Experts say banks and credit unions should do more to adhere to the security tenets outlined in the DSS. The DSS is a self-regulatory framework for protection of payment card information, but that doesn’t need to be mandated.”]
Source: https://www.bankinfosecurity.com/demanding-stronger-card-security-a-4535