I believe that only applies to health personnel. If someone not in health service outs him, it’s still legal.
The law applies to: Healthcare providers include hospitals, clinics, doctors, psychologists, dentists, chiropractors, nursing homes, pharmacies, home health agencies, and other providers of healthcare that transmit health information electronically.
HIPAA also applies to business associates of HIPAA-covered entities and their subcontractors.