The Health Insurance Portability and Accountability Act is often cited when it’s not applicable. Here’s what’s covered and what’s not.