...effectiveness of the PCI rules, which are formally known as the PaymentCard Industry Data Security Standard (PCI DSS). They claimed...transactions, is overly complex and has done little to stop paymentcard data thefts and fraud. I disagree that the standard...
http://www.computerweekly.com/blogs/stuart_king/2009/04/pci-computerworld.html