Do you need to consider HIPAA if you aren’t a healthcare provider?