Payment Card Industry Data Security Standard (PCI-DSS)
Because Credit Cards can be used to spend money without authorization (provided you have the Credit Card details) very strict rules apply that an organization must conform to to prevent Credit Card abuse.
If a company is Breached and Credit Cards are abused, then if the organization is not PCI-DSS Compliant then the Federal Government will impose incredibly high fines.