Achieving PCI DSS 4.0 Compliance: Your Legal Questions, Answered