In subsection 5(6), it says towards the end: “[...] information regarding the business affairs of a payment card network operator [...] is confidential and must be treated accordingly.“
Is there any penalty in case of infringement of this section? The security of information obtained by credit card companies is very important to the public. Are there any penalties for non-compliance?