Is Credit Score considered regulatory PII?

I Operate an EComm company and we’re investigating allowing for financing on our products. A part of that is that we may need to receive credit scores at least in transit from Equifax, Experian, etc. I can’t find the appropriate regulatory treatment for that data (PCI, HIPPA, etc). What regulations govern credit score specifically?