3 ms·

I’m a PCI QSA and this is exactly correct. No one should store card data for recurring transactions. India just made it a law. Good for them.