HIPAA only covers entities that are legally required to follow it. Covered entities and business associates. It doesn’t apply to anyone else.