documentation not handling or storing the full payment information for clients PCI DSS (Payment Card Industry Data Security Standard) compliance and where it is applicable the different types of security required for HIPAA compliance vs PCI compliance the intersection of compliance components for PCI and for HIPAA what payment processors handle why you don’t need a BAA with your payment processor