Your medical practice website is more than a digital brochure. The moment a patient submits a contact form, fills out an intake questionnaire, or logs into a patient portal, your website becomes a conduit for protected health information (PHI). And the moment PHI enters the picture, HIPAA applies.