@PaymentsGuardian 

Thanks for your reply. I go to great lengths to protect client data, and one of those is to not collect, store, or transmit customer credit card data. 

PCI stands for Payment Card Industry Data Security Standards. It is a way for the Card Industry to push their liability back on you, the client. Even though you may have liability and cyber insurance etc..., this is another layer designed to protect their business, not yours. By taking that survey, you are stating that you meet those standards; if there is a data breach, the first thing their Lawyers will look at is YOUR compliance and will attempt to place any blame on you, even though they could be at fault, and a 'small' business is not going to beat a $B company in court.

The way QB/Intuit has gone about this is a clear shakedown and has destroyed brand trust in my eyes. This is not about protecting you; it's about protecting their bottom line and their liability.