PCI DSS applies to all participants that process, store, or transmit cardholder data AI systems in payment environments are subject to ordinary PCI DSS scoping principles As of March 31, 2025, ...