I might be wrong, but my understanding is that HIPAA privacy rules only apply to healthcare providers like hospitals and their employees.<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Health_Insurance_Portability_and_Accountability_Act#Privacy_Rule" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Health_Insurance_Portability_a...</a>