If your last serious conversation about PCI DSS happened right before your last audit, it's time for a new one. PCI DSS 4.0.1 is now the only active version of the standard, and its new requirements are fully mandatory. But the bigger shift isn't a single new rule — it's a change in how compliance