Gaming and virtual services on the Internet, like Sony's PSN, World of Warcraft, and Second Life, boast millions of users. For each user, the service must store credit card information and personally identifiable information. What must these organizations do to protect the private information of their customers?