Definitely! All merchants accepting credit cards are to become compliant to PCI with the card associations. A non-compliance fee of $24.95 is collected to companies that choose not to become compliant. Apart from these, it is merchants responsibility to pay fine for data breach. If you are compliant to PCI you follow all the rules of relevant card’s branded rules. Not being PCI compliant could be expensive for the businesses.