If your business accepts debit or credit cards as payment, yes, you must be PCI compliant.