[dragonwriter]

That's the general project baseline FAQ, the COVID-19 project FAQ has a similar question which does not address HIPAA: “We are committed to maintaining high privacy standards and keeping your data safe. Project Baseline follows federal and state regulations governing the collection and use of an individual's data. Data is stored in advanced systems with security and privacy protocols.”