A developers guide to HIPAA compliance
First step: figure out if you are a covered entity or a business associate, or neither.  If not, the law doesn't apply to you.  However, you may still want to follow its guidelines.it's an onerous law and many people now cite it when they don't want to provide information, even if the law doesn't apply to them.