Are all Businesses and Service Providers required to comply with the PCI DSS?
Yes. All entities (businesses or service providers) that store, process, or transmit cardholder data must comply with the PCI DSS. The requirements apply to all acceptance channels including retail (brick-and-mortar), mail/telephone order (MOTO) and e-commerce. Validation requirements vary depending on Service Provider or Merchant level.