Goes along with a big badge saying they are HIPAA compliant. I mean, if they are a covered entity (which is to say, if they are providing healthcare services)

Goes along with a big badge saying they are HIPAA compliant. I mean, if they are a covered entity (which is to say, if they are providing healthcare services), they have to be HIPAA compliant, or be prepared to be fined heavily by the Feds for breaking the law. If they are not a covered entity, they don't really have any meaningful obligations under HIPAA, so being compliant is meaningless.