HIPAA and FDA are completely independent. HIPAA is much broader and at the same time much less cumbersome to comply with. I'd be extremely surprised if they wer

HIPAA and FDA are completely independent. HIPAA is much broader and at the same time much less cumbersome to comply with. I'd be extremely surprised if they weren't being HIPAA compliant, not just because of the law but because HIPAA doesn't ask much that they wouldn't be insane not to do anyway.