Payment card schemes and the processing entities that are located in the same premises shall be organised in separate workspaces equipped with restricted and controlled access.