On PCI and teeth :-)

OMG, where is the world going. First, toothless HIPAA (don't even try visualising a toothless hippo :-)), now another horrible revelation: PCI is toothless too: "Another factor in the slow pace of adoption is the perception that PCI, unlike government mandates, is a private standard lacking enforcement teeth"

I actually kind doubt that PCI has no bite, but if the rumors are true and CardSystems truly was the only company that suffered PCI action, that maybe it is true...