HIPAA applies exclusively to covered entities. Your employer is, in most cases, not a covered entity. If you want evidence of this (assuming you're in the United States) go look at the information required by your employers FMLA disclosure form.

Hint, the I in HIPAA stands for insurance. If insurance isn't involved, HIPAA probably isn't either.

https://www.hhs.gov/hipaa/for-individuals/employers-health-i...