Which of the following entities are required to follow the privacy and security rules that are part of hipaa? schools pharmacies health clubs city clerk’s office

pharmacies are required to follow the privacy and security rules that are part of HIPAA?

i think it's the first one because doctors aren't the ones who get rid of the old needles. most of them time it's not even doctors who give you shots, it's nurses.