[JAlexoid]

This comment is hard to understand.

PCI-DSS is not a government body, nor is legally mandated by the government. It's not the government.

[kragen]

clueless regulation is equally harmful regardless of how it's imposed

both governments and visa are in a position to impose it