Lead Generation For Medical Practices Falls Under HIPAA! This means your Marketing Company has to be HIPAA compliant and you have to have a BAA with them.