Hacker News Reader

Only “covered entities” and their “business associates” fall under HIPPA. Most firms don’t meet the definition.

This is correct. Also, when a law firm client goes under contract with a firm, they often sign HIPAA-compliant medical-release documentation.

Some software providers in the AI medical space are conservative here and have customers sign a BAA directly on signup.