Any medical practice, clinic, pharmacy, healthcare provider, or company could face issues of HIPAA compliance when moving their business or application online. Businesses bear an increased duty of care to their customers when they handle confidential protected health information (PHI), especially when it's exposed on the internet.