RPAA third-party service provider rules: see what your PSP must assess, contract, monitor and report, and why you stay liable. Read the guide.