Yes, no, and maybe. It's been a few years since I read through HIPAA. If insurance pays, generally it will be a HIPAA entity. However, a company can be a "hybr

Yes, no, and maybe. It's been a few years since I read through HIPAA. If insurance pays, generally it will be a HIPAA entity. However, a company can be a "hybrid" entity and logically separate it's HIPAA and non-HIPAA services. So, just because a company accepts insurance, doesn't mean all services are HIPAA compliant. Lastly, I think (but don't quote me on this), there's a way for an insurer to cover something as a "benefit" of sorts without it being tied to HIPAA. At the end of the day, my understanding is everything is tied back to CMS.