It probably should apply. The spirit of HIPAA is the protection of health information.