Yes, it is important to remember that, unlike other compliance frameworks such as SOC2, ISO 27001, and NIST, being PCI compliant is a legal requirement.