Currently, organisations such as retailers that handle data of card payments are required by the major credit card companies to comply with the PCI DSS standard, but according to the report, the requirement does not guarantee the security of payment data.