Requires organizations that work with credit cards to implement security measures to protect cardholder data and prevent credit card fraud.