Cardholder Data, Penalties, and Trust: The Real Stakes of PCI DSS Non-Compliance

In this short video, Speaker A delivers an instructional overview of PCI DSS, emphasizing that compliance is required for any entity that stores, processes, or transmits cardholder data—whether a point‑of‑sale terminal, a web‑based entry form, or a network that carries the data. The speaker debunks the myth that PCI compliance is solely an IT responsibility and stresses that everyone who touches card data is in scope. He then outlines the severe consequences of non‑compliance, citing industry and governmental warnings about financial penalties, costly forensic investigations, and the possible loss of the ability to accept card payments, which could cripple an organization’s operations. Interleaved, Speaker B inserts a promotional segment for Atlantic Training’s Wave management platform, positioning it as a solution for scattered employee‑training processes by offering free software with a training plan, automated onboarding, and leadership‑development tracking. The clip blends educational content about PCI DSS obligations with a commercial pitch for HR and soft‑skill training services.










