Many companies negotiate contracts containing merchant of record designations without fully appreciating the significance of that designation from a privacy and data security perspective.

For purposes of this article, the merchant of record is the party that both contracts directly with the payment processor and…