Business services, namely, formulation of best practices for acquisition, maintenance and use of personally identifiable information; business consulting services to merchants to enable compliance with laws and regulations in the field of personally identifiable information