That's interesting. When I was in college I worked tech support for the residence halls, and we went through what I remember to be a short HIPAA compliance program in case we encountered any medical information while servicing another student's computer. Perhaps that was just a (reasonable) precautionary policy of the university rather than a strict legal requirement under HIPAA. Or perhaps I'm simply misremembering, and it was some other compliance program other than HIPAA.