I have an ecommerce website that's PCI compliant, and the website does not have an XML sitemap. The previous webmaster stated that he removed the sitemap because it caused the website to fail PCI validation testing. (We use the McAfee SECURE service for automated testing.) I'd like to restore the sitemap for SEO, but I don't want to jeopardize our compliance.
Assuming that my new sitemap only includes relevant product/information link information, do I have anything to worry about?