Once again, Take into account that these aren’t “fines” in exactly the same sense that, say, you’d buy violating some govt regulation or visitors law; they’re penalties developed right into a agreement amongst retailers, payment processors, and card makes. The PCI Security Expectations Council was designed by these market gamers https://www.nathanlabsadvisory.com/nydfs-cybersecurity-risk-assessment.html