## PCI-DSS & HIPAA

### PCI-DSS (Payment Card Industry Data Security Standard)
*   **Scope**: Anyone protecting credit card numbers.
*   **Rules**: Very technical.
    *   "Install a firewall."
    *   "Encrypt data in transit."
    *   "Use Anti-Virus."

### HIPAA (Health Insurance Portability and Accountability Act)
*   **Scope**: US Healthcare (Hospitals, Insurance).
*   **Focus**: Protecting PHI (Personal Health Information).
*   **Rule**: More flexible/vague than PCI, but huge fines for breaches.