Note that this text only appears under "How will you protect my privacy" _under the FAQ page_. If you look at the question with the same title on the landing page, HIPAA is not mentioned
That's because one is about Project Baseline in general (the one that mentions HIPAA) and one is about the special COVID-19 project (the one that does not.) They are different FAQs about different efforts.