Who must comply with HIPAA?

Although HIPAA applies to health insurance carriers, group-sponsored health plans, health care providers, and health-care clearing houses, HIPAA also affects plan sponsors, billing agencies, agents, information systems vendors and service organizations.