Any working professional that is handles PHI is bound by it and not just health care professionals. This could also be managers in a hospital. An individual is not.