When merchants signal a contract which has a payment processor, they agree to be issue to fines whenever they are unsuccessful to maintain PCI DSS compliance. Go with a compliance automation software Device to save time and value. Pro tip- pick a licensed CPA business that also provides compliance automation https://www.nathanlabsadvisory.com/hipaa-hitech-compliance.html