This does not fall under HIPAA. Under the HIPAA regulations, the entities that must comply with the rules are defined as covered entities which are: health care plans, health care providers, and health care clearinghouses. So health clubs or gyms do not meet this definition and are therefore not subject to HIPAA. However, depending on your state, there may be laws which protect the sharing of this type of information.