Click is designed to meet and exceed current legal and regulatory standards for secure payment processing, including full compliance with PCI-DSS and HIPAA requirements. Our technology supports healthcare merchants and financial institutions in minimizing risk, safeguarding sensitive data, and adapting to evolving privacy expectations.
Zoin Solutions has obtained legal analysis confirming that Click complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), including its implementing regulations at 45 C.F.R. Parts 160–164. Under HIPAA, Covered Entities may disclose Protected Health Information (PHI) to payment processors for transaction purposes without patient authorization, provided disclosures meet the “minimum necessary” standard. Click enables merchants to reduce the amount of PHI shared during payment processing—such as names, provider details, and service descriptions by limiting disclosures to essential transaction data. This helps Covered Entities:
The Office for Civil Rights (OCR) enforces HIPAA through audits, breach investigations, and complaints. Penalties for non-compliance range from $100 to $50,000 per violation, with annual caps up to $1.5 million. While financial institutions are generally exempt from HIPAA when performing standard payment functions, Covered Entities remain responsible for evaluating and limiting PHI disclosures.
Click helps healthcare merchants meet this obligation by offering a streamlined, privacy-conscious alternative to traditional payment flows. As industry standards evolve, technologies like Click are setting new benchmarks for what qualifies as “minimum necessary.”
Click also aligns with the principles outlined in Executive Order 14117, which restricts bulk transfers of sensitive personal data to foreign entities. Although financial transactions are currently exempt from this rule, Click’s architecture is designed to meet its security expectations—ensuring that American consumer data is protected from unauthorized access and misuse.
Our payment transaction process and data minimization protocols offer enhanced safeguards compared to conventional PCI-compliant transactions. As regulatory frameworks expand to include financial data, Click is well-positioned to support compliance and mitigate future risk.
