I sure have learned a great deal from this thread. Also learned that when I call companies about PCI compliance they dance around trying to figure out how much money you have before they start giving you information.
Kind of sad really.
Oh, and everyone I spoke has said "not meaning to scare you but you could be shut down or fined up to $100,000 if you are not compliant.
I really do care about customer protection, but this sounds as bad as the merchant account business is. The whole industry is "questionable" really.