PCI-DSS is not a government body, nor is legally mandated by the government. It's not the government.
both governments and visa are in a position to impose it