This is the legal process for capturing calls in a way that matches the requirements of the Payment Card Industry Data Security Standard. Any time a customer gives their card details in a call that is recorded/captured, you need to put in place systems to comply.