Because BBS EPT systems handle sensitive authentication data (SAD) and cardholder data (CHD), they must comply with the . Key requirements specific to BBS EPT include: