HIPAA and PCI are two distinct and different sets of requirements. Each is specifically designed for different types of information. HIPAA was designed by government committees trying to protect citizen data. PCI was designed by the private industry to reduce fraud-related costs regarding the loss of card data.
A validation point is a specific evidence needed to support the appropriate implementation of the requirement. For example, interviewing management and reviewing policy documentation are two different validation points.
HIPAA vs. PCI: validation points
HIPAA:
The Security Rule contains 75 requirements with 254 validation points
The Breach Rule contains 10 requirements with 26 validation points
The Privacy Rule contains 72 requirements with 255 validation points
PCI:
PCI DSS 2.0 contains 292 requirements with 1030 validation points