Which data type is protected under the PCI compliance framework?