When your own data has not been obtained directly from you but from One more supply, you must acquire exactly the same data as higher than (apart from the correct to withdraw your consent). Ordinarily, it is possible to resume usual actions in just a 7 days after a PCI. https://nathanlabsadvisory.com/how-nist-800-171-compliance-consulting-in-usa-can-secure-your-business-data/