Maybe not, merely for owning it. But what if the owning or acquiring entity decides to sell that data to medical insurance companies, or private investigators. Are there then HIPPA complications? Because now the data is interesting because it has bearing on medical or insurance decisions.