Not necessarily. The Health Insurance Portability and Accountability Act (HIPAA) has strict standards for how health-care providers and their business associates, including third-party debt collectors, handle sensitive personal health information. Debt collectors can receive and disclose information but only to the extent that it is absolutely necessary to perform their job.