Doctors using PayPal, Square, or Stripe for payments are breaking HIPAA law. These processors aren't HIPAA-compliant because they keep transaction data, and their contracts make the medical practice responsible for compliance, not the processor.
Chapters
Yeah, if you're a doctor's office, you need to have EMV and you need to make sure you're using a HIPAA-compliant solution. And these PayPal, Square, Stripe, etc., none of those are HIPAA-compliant because they, they take the data. So I got a question about the, the, but the, these, how are these medical companies even allowed to sign up? How is Square just— because they put in there, it says what I told you, the Square sellers, which is the right, are responsible return of determining whether they're subject to HIPAA requirements. But if it's a, if it's a doctor's office, well, they're putting it on the doctor saying, oh, it's up to them to decide. It's right here in their written agreement.