Physician medical billing companies are subject to HIPAA requirements, and they must comply to protect sensitive patient information. They must have policies and procedures in place to maintain data privacy and security, including secure electronic medical records systems and data encryption.