. "While currently companies such as Visa and MasterCard require both merchants and service providers to maintain PCI DSS compliance, when it comes to protecting PII, going the extra mile to safeguard data, never hurts." . . . .