Lack of information from banks and cost of implementation are the challenges to overcome in the charity's PCI DSS compliance process