HIPAA applies to 3 categories of individuals/entities:

Covered Entity (CE), Business Associate (BA), and members of a CE or BA workforce (45 CFR § 160.103)