This page is general information only and is not legal advice. Schools remain responsible for their PCI DSS, Privacy Act and BECS obligations.