If it is proven that a merchant's credit card data were compromised and the merchant is not PCI DSS compliant, the merchant may face fines, be required to pay the cost of a possible investigation, and still
be held liable for the fraud perpetrated. Accordingly, for the security of your business and of your clients, it is essential that you be PCI DSS compliant.