Is a med spa really subject to HIPAA?

Treatments under medical direction create PHI, charts, consents, photos included. Our compliance services right-size the safeguards.