This is absolutely incorrect, and you really need to let it go, as you’re bordering on actively posting misinfo.
I work in the insurance industry and we have to deal with HIPAA compliance and authorizations regularly.
HIPAA does NOT compel anyone to be a mandatory reporter; it exists to protect patients’ confidentiality with their medical providers.
No it isn’t a “vault,” as anyone who uses any 3rd party tech to track their biometrics should know, hopefully; but HIPAA is a legally binding confidentiality contract, and not… whatever it is that you’re trying to twist it into here to make your point.