Medical billing companies must guarantee their privacy policy about PHI to become HIPAA compliant. They must implement such strategies that can legally bound them to handle this confidential information according to HIPAA Privacy and Security rules. They should also comply with HIPAA audits conducted by agencies such as the US Department of Health and Human Services.