How is PCI Enforced?