Most online retailers aren't there yet on new payment card security standards

In a recent survey of online retailers, only three percent have reported to passed the assessment and external scan needed to comply with the Payment Card Industry Data Security Standard, which became mandatory on June 1, 2005. A quarter of the vendors haven't even started yet while the majority are in the process.

Sounds a lot like the state of PIPEDA compliance in 2004.