I take exception to the statement ...These standards, to which merchants, banks and other institutions must adhere if they want to continue to accept credit cards,...-??? This is not true - previously I worked for an unnamed company that were (are still?) NOT PCI compliant and were / are perfectly at ease with the position of Risk Acceptance and paying the monthly FINES rather than the expense