Yes. PCI DSS compliance is required for all businesses that store, process, or transmit payment cardholder data.