It difficulties recommendations on how to interpret Main concepts with the GDPR and will situation binding selections addressed to the data security authorities on dispute in concrete situations about cross-border processing. PCI compliance is split into 4 levels, dependant on the annual variety of credit rating or debit card transactions https://www.nathanlabsadvisory.com/nist-800-171.html