Companies that aren't in compliance with PCI DSS Section 6.6 risk fines and other losses that could reach into the millions of dollars.