PCI compliance is time consuming but essential.