NIP82 doesn't change the fact that they have to still comply with regulations.

Also, not every company that is receiving your medical information need to be HIPAA compliant.