But that makes sense, given that almost every company accepts credit CARDS in some way, shape or form and thus is on the hook for PCI compliance.