# 45 CFR § 164.512.f.5 - Uses and disclosures for which an authorization or opportunity to agree or object is not required.
snip
(5) Permitted disclosure: Crime on premises. A covered entity may disclose to a law enforcement official that the covered entity believes in good faith constitutes evidence of criminal conduct that occurred on the premises of the covered entity
https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164
I think I cited that correctly - apologies if I didn’t.
I mean it’s right there - if you - in good faith (and while I don’t ever think the whacko’s have good faith - I’m going by what’s going to hold up in a court here) think there is a crime happening you can report it without violating HIPPA. There is a difference between what you are allowed to give to law enforcement without consent, and what you are allowed to report. I’m honestly shocked anyone thinks that a privacy law would shield someone and provide cover for reporting a crime.