This outstanding Q&A is aimed towards massage therapists but the information is valid for practically any healthcare-related service that needs to know about potential legal obligations with respect to HIPAA compliance:
(https://www.abmp.com/textonlymags/article.php?article=801)
