Currently, QuickBooks Online meets industry standards for online security, but is not compliant with the HIPAA standards for privacy. If you are a health care professional, it is not recommended that you enter "individually identifiable health information" into the QuickBooks Online program.
We don't have any further information on this subject, and we're not equipped to advise you. For more information on the subject, as well as to seek legal advisement regarding this issue, log on to: http://www.hhs.gov/ocr/hipaa/