Again, keep in mind that these aren’t “fines” in exactly the same sense that, say, you’d purchase violating some authorities regulation or traffic law; they’re penalties designed right into a deal involving retailers, payment processors, and card manufacturers. Providers can demonstrate they’ve applied the standard by meeting the reporting specifications https://www.nathanlabsadvisory.com/blog/nathan/cyber-security-consulting-solutions-by-nathan-labs-advisory-in-the-usa/