It’s HIPAA, not HIPPA.
HIPAA is toothless. There is no private right of action under HIPAA. It’s up to the government to bring any action for violations.
HIPAA applies only to covered entities; it does not apply to all persons or institutions that collect individually identifiable health information.
HIPAA isn’t your savior.
Then U.S. Constitution is!