Question: is pci compliance required by law?
Answer: Compliance with PCI DSS is not required by federal law in the United States. ... Unlike Nevada's law, entities are not required to be compliant to PCI DSS, but compliant entities are shielded from liability in the event of a data breach.