I don't like the idea of notifying him and then being responsible for checking in later to make sure something happened. That's not your job. You should probabl

I don't like the idea of notifying him and then being responsible for checking in later to make sure something happened. That's not your job. You should probably report the violation and let the PCI industry handle it.