PCI compliance is based on transaction data security, which keeps private cardholder information safe from people who shouldn't have access to it while payments are being processed. To stop fraud, PCI DSS says that businesses must encrypt data, use safe networks, and use access controls.