... , employees may have access to covered information, cardholder data, or other confidential customer ... Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established ...