Absolutely. We are a “covered entity” under HIPAA, which means we are subject to all of HIPAA’s rules and guidelines designed to protect private health information.