Comments to PCI Compliance Is "Industry Self-Regulation" 2008-04-29T13:38:30-07:00 Practical Ecommerce info@practicalecommerce.com http://www.practicalecommerce.com/ Copyright 2007 Confluence Publishing DBA Practical Ecommerce Dave http://www.practicalecommerce.com/articles/723/PCI-Compliance-Is-Industry-Self-Regulation/#comment9628 2008-04-29T13:38:30-07:00 Everyone is in favor of high security and protecting card holder information. That is not the issue. But levying fines or denying processing privileges to merchants who have been processing securely for years if they don't comply with a blanket set of guidelines (one size does not fit all), and pay third parties for certification services, feels like extortion. Teresa http://www.practicalecommerce.com/articles/723/PCI-Compliance-Is-Industry-Self-Regulation/#comment9617 2008-04-29T07:33:26-07:00 This is an over simplification of this subject. Fines for a breach are more than heavy. Unless you have Wal-Mart like deep pockets a breach of more than one card # will put you out of business! Please do not put this off.