Cryptome.org posted the industry-only brief in this a couple of weeks ago - keep up at the back.
I've had 2 bank (ie debit) cards ripped off in the last 3 months, have to say that Smile were very nice about it (instantly reversed all the transactions over the phone) whereas Barclays made me fill out forms, and review my own statements, and said that more charges may appear in the future.
Needless to say I'm still waiting for PayPal to refund me.
Anyhoo, as a result I have now switched to using a credit card exclusively online (they shoulder the risk and refunds are instant) and a Tuxedo prepaid card (or more likely cash) offline. My debit cards have been cancelled and replaced by cashpoint-only cards.
Chip And Pin (aka "Fuck you, liability isn't with us any more!!!11") led me to do this - thanks, APACs!
Valentines to reflect CNP intro date