I have a friend who is a small business owner that sells things over
the internet. The internet is a secondary sales avenue for him but it
is important.

At the moment he is saving CC info etc to make things easier for his
clients. Apparently there is a big push in the US for all businesses to
implement a bunch of security, proceedures etc. He HAS to be completely
complaint in about a year (?).

I suggested he try and simply do a front end with Paypal and let them
worry about all that stuff. He doesn't have anyone to help with his
system etc. He replied that Paypal was evil. I researched the internet
and have concluded basically the same thing. Any time you start waiving
rights you know there has to be a problem.

Any other options out there?