In providing certain services, the Bank is required to comply with the operating rules promulgated by various card associations and network organizations, including certain data security standards, with such obligations arising as a condition to access or otherwise participate in the relevant card association or network organization.