HIPAA is for safeguarding medical info. ClubReady is neither a Health Plan, a Health Care Provider or a Health Care Clearinghouse. ClubReady does not have individually identifiable health information (PHI) nor are we contracted to perform services on PHI -- therefore are not a Business Associate of a covered entity. The Privacy Rule protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper or oral. The Privacy Rule calls this information "protected health information (PHI)." As of this time, we do not hold PHI -- ClubReady does not house medical information. HIPAA does not apply to ClubReady at this time.