Becoming (and remaining) PCI compliant carries a range of costs. What you can expect to pay depends on your merchant level, which is dependent on variables such as: The size, location, and nature of your organization The number of card-based transactions you process annually How you capture and process card-based payments (i.e., in-person or online) There may be additional costs associated with employee training, which is voluntary for smaller organizations, but often required for larger ones. Upgrading magstripe POS terminals with more secure EMV-enabled readers also carries expenses. The same is true for eCommerce merchants that protect their visitors by adding Secure Sockets Layer (SSL) certificates to their sites. Of course, there are direct PCI compliance fees – normally calculated and charged by your payment processor. These variables make it difficult to provide an exact “cost” for PCI compliance. However, smaller organizations can expect to pay 0 to 0 annually to become and remain compliant. By contrast, a multinational enterprise might need to spend ,000 to 0,000 a year to remain in good standing.