Yes, nonprofits must be PCI compliant if they accept, process, store, or transmit credit card information. There are no PCI compliance exemptions for nonprofit organizations.