If your business isn't PCI DSS compliant, you could suffer some serious penalties. Fines can start at $5,000 per month for non-compliance, and go up from there. You could also face legal action if a data breach occurs, and could even be shut down permanently. Clearly, it's in your best interest to make sure your business is PCI DSS compliant if it is operating in this industry.