A technician is imaging a point-of-sale terminal that stores customer credit card numbers for a retail store. Which regulatory framework specifically governs how this cardholder data must be secured and handled?