Are there differences in PCI enforcement by region