Sharing confidential medical info person to person

HIPAA only applies to covered entities and business associates. So no, HIPAA doesn’t apply unless the person disclosing falls into those categories.

Are they sharing their own info or someone else’s? While HIPAA doesn’t apply unless it’s a disclosure by a covered entity or their business associates, other state privacy laws might be implicated depending on the facts.

quote:

---

Who Must Comply?

Covered Entities: Health care providers, health plans, and health care clearinghouses that transmit health information electronically.

---