Is CiviCRM HIPPA compliant?
There was quite a discussion about this here which is worth your perusing. It suggests that the question won't be 'is civicrm HIPPA compliant' but 'is my configuration and usage of civicrm HIPPA compliant'.