American Express has established a list of Data Security requirements. These rules pertain to how a company stores cardholder information. It is also the responsibility of the merchant company to inform their customers about online security and share with the customer the steps that the company has taken to ensure that their information is safe and protected.