The data controller establishes the applications for which as well as the suggests by which personalized information is processed. Formally attest your compliance. An AOC (attestation of compliance) is the form you employ to signal that you choose to’ve obtained PCI DSS compliance. Finishing your questionnaire without any “Improper” responses https://www.nathanlabsadvisory.com/certified-data-privacy-professional-cdpp.html