PCI-compliant caching requires caching only in volatile storage, which you can enable with beresp.pci in VCL.
This is a companion discussion topic for the original entry at https://developer.fastly.com/solutions/examples/set-pci-flag-to-disable-persistent-cache-storage