HIPAA security and privacy regulations apply to?

A. only attending healthcare workers who do direct patient care
B. only the billing department
C. anyone working in a medical facility
D. Top management