When Merchants indication a contract that has a payment processor, they agree to be matter to fines when they fall short to keep up PCI DSS compliance. Formally attest your compliance. An AOC (attestation of compliance) is the form you utilize to signal that you simply’ve accomplished PCI DSS compliance. https://www.nathanlabsadvisory.com/eu-us-privacy-shield-gdpr.html