Yes, virtual assistants who handle protected health information (PHI) are required to be HIPAA compliant to ensure the privacy and security of patients' sensitive medical information. This includes implementing appropriate safeguards, encryption, access controls, and adhering to HIPAA regulations to prevent unauthorized access or disclosure of PHI.