Excerpt: Complying with the HIPAA Privacy Rule is not something that only health care providers and insurance carriers need to worry about. HIPAA does not specifically cover employers, but to the extent that they sponsor health plans and have access to the personal health information of their employees and families, they need to comply with at least some of the law's provisions.