Payment Card Industry Data Security Standard (PCI DSS) is a set of 12 requirements that ALL businesses who take Credit or Debit card payments must comply with - even if you are outsourcing your payments to a Payment Service Provider. If you are involved in payments you are affected!
This depends on your merchant level. The PCI Levels, as prescribed by the Card Schemes, are as follows:
Less than 20,000 e-commerce Visa or MasterCard transactions per annum or less than 1 million other Visa or MasterCard transaction per annum
The Prioritised Approach and provides guidance on how to focus PCI DSS compliance work in a way that ensures prioritising the highest security risks.
The PCI Security Standards Council manages the security standards for the payment cards industry. The council was formed by Visa, MasterCard, American Express, JCB and Discover.