HIPAA only applies to healthcare providers and a couple related industries. Facebook is not there (yet).