No, PCI DSS is structured according to tiers that reflect the quantity of credit card transactions a company processes and the channels used to accept the payments. The reporting requirements and penalties for non-compliance are based on a company’s PCI-defined merchant level. The requirements necessary to achieve compliance are the same for all organizations.