What matters is whether your job duties involve Protected Health Information, not where you work. If you are a business associate you must have your own HIPAA policies and procedures. If you are a workforce member for a covered entity (whether as an employee, independent contractor, or even volunteer) you must follow the covered entity’s HIPAA policies.