Medical billing service providers are subject to HIPAA requirements and must comply to protect sensitive patient information. They must have policies and procedures in place to maintain data privacy and security, including secure electronic medical records systems and data encryption.