Re: UK Law Must Introduce Guest Checkout
Err, erm this says more about your knowledge of PCI:DSS than the incident.
You can still be required to complete SAQ A-EP even if you do NOT handle card data either in transmission or at rest.
The one to avoid is SAQ-D if you need this, then you need to ask yourself if you need to review your infastructure design...