Compliance with PCI DSS

Compliance with PCI DSS is a contractual obligation. · Explain how this differs from a regulatory obligation. · Which takes precedence a regulatory requirement or a contractual obligation? Explain your answer. · Who enforces PCI compliance? How is it enforced?