...challenged the effectiveness of the PCI rules, which are formally known as the Payment Card Industry Data Security Standard (PCIDSS). They claimed that the standard, which was created by the major credit card companies for use by all organizations...
http://www.computerweekly.com/blogs/stuart_king/2009/04/pci-computerworld.html