HIPAA applies to healthcare providers, health plans, and healthcare clearinghouses, as well as any business associates that handle PHI on their behalf.