In an environment where highly delicate cardholder data (think: cardholder name, service name, primary account number, and more) changes hands often, there need to be some rules defining how companies are supposed to handle such data while ensuring compliance.