Integrating PCI Compliance with HIPAA

PCI DSS is applicable for anyone who stores, process or transmit sensitive payment card data and have specific sets of requirements. HIPAA has much wider scope and covers all entities which stores or has access to Protected health information (PHI). Even though the type of data protected for these standards are completely different, we can draw similarities as both are protecting information which is critical through various security controls.