Yet again, Remember that these aren’t “fines” in the exact same feeling that, say, you’d purchase violating some federal government regulation or traffic regulation; they’re penalties crafted right into a contract in between merchants, payment processors, and card brand names. The PCI Security Benchmarks Council was established by these marketplace https://www.nathanlabsadvisory.com/blog/tag/information-security/