When merchants indication a deal with a payment processor, they agree to be subject to fines should they fall short to take care of PCI DSS compliance. Set up firewalls and router specifications, which set principles for letting and denying access to your systems. Firewall configurations should be reviewed bi-yearly https://www.nathanlabsadvisory.com/blog/tag/gdpr-compliance/