If a business relies on stealthily moving payment information from the merchant with whom the customer is dealing and a 3rd party, then perhaps a "deal breaker" is necessary. A customer should be able to expect that payment information is only handled by the merchant processing the order. Throwing "click here for your FREE OFFER" pop-ups that contain "offer terms" signing the user up for 360 months of charges, or hiding "print tickets now" links amongst huge, blinking graphics about "E Z TRIALZ" that only serve to cause credit card charges should not be recognized as good business.
Having read through the bill[1], it seems narrowly-tailored just to prevent such annoyances. A merchant needs to understand that payment information is arguably the second most precious thing given by a customer, and that information needs to be protected. Yes, customers have options, but when every seller in a particular class--I'm glaring at you, movie ticket sales websites--has taken this scammy step, the "choice" is meaningless.
1 - http://thomas.loc.gov/cgi-bin/query/z?c111:S.3386: