>> and card company rules are not quite as threatening as actual laws

Well, they are plenty threatening in the sense that if you don't follow them, they will refuse doing business with you, which suddenly means you can't accept cards at all, which can kill a business entirely.