>> and card company rules are not quite as threatening as actual laws
Well, they are plenty threatening in the sense that if you don't follow them, they will refuse doing business with you, which suddenly means you can't accept cards at all, which can kill a business entirely.