HIPAA does four things by which every person or organization who comes in contact with an individual's healthcare data is affected.