My real surprising was local merchant's current payment processors disregard  their clients on the risk by leaving their customer as non PCI complainant and never pay attention for EMV acceptancewhich is most important mandatory. Also I have been seen so many of local business which are not PCI Compliant even if so many of small business have been lose their business becauce of heavy expense and fines for the data breach compromise.