For practices and businesses that handle any type of patient information
For any practice or business that processes financial transactions or is required to meet security standards