Like, do you even HIPAA bro?
None of that is how it works. Disclosing confidential patient data is a crime. Coming up with a thin-ass excuse for doing so, especially in the case when that patient was specifically harmed by the action is a serious crime. This is exactly the kind of thing HIPAA was written for - to prevent harm to patients from uncontrolled disclosure of their personal health information. Accidental disclosure of patient information is enforced. Accidental disclosure that causes harm is severely punished. There’s nothing about this case that mitigates that.
