With the requirements set up by the Payment Card Industry Data Security Standards (PCI DSS), a lot of businesses scratch their heads and ask whether PCI is a law. The answer to this question is very short and simple no PCI Compliance is not a law.
Will PCI Compliance be a Law in Future? To make the things more clear, let’s go in detail about this topic. At the moment it is not a federal law; but still there are some state laws that are in effect (while some might go in effect in future) to implement the requirements of PCI DSS.