HIPAA only applies to "covered entities" (e.g. healthcare providers). It's why your employer is allowed to ask about your COVID vaccination status (even if they are also a healthcare provider).

https://www.hhs.gov/hipaa/for-professionals/covered-entities...