We spoke to our Credit Card company and have had sign off from them subject to PCI Compliance and a suitable GDPR retention policy, to use Microsoft Forms for capturing data.
We are fully PCI Compliant from our card company for capturing card details in this way and we are also licensed by the Information Commissioners Office to hold data, use and maintain it; all our systems are fully GDPR compliant and capturing this kind of information in this way is also approved and compliant.
Can Microsoft lift this error stopping us using the form in a fully compliant way? How can I get this escalated?
