In 2009, virtually all health care providers take credit cards - and virtually none of them are PCI compliant.