[dadgum]

Actually, the investigator skirted the edge of HIPAA:

Under the HIPAA facility directory rules (45 CFR § 164.510(a)), a hospital may disclose certain limited information to someone who asks for a patient by name, if the patient has not opted out of the directory. Official HHS guidance specifically allows releasing the fact that a patient has been “treated and released” (or is no longer at the facility) as part of that directory information. It is treated as reflecting the patient’s location (no longer in the facility) and general condition.

[dadgum]

Sloppy of Talarico’s handlers to not opt out.

[Flaming Conservative]

I doubt he gave permission.

[Labyrinthos]

“Actually, the investigator skirted the edge of HIPAA:

Under the HIPAA facility directory rules (45 CFR § 164.510(a)), a hospital may disclose certain limited information to someone who asks for a patient by name, if the patient has not opted out of the directory. Official HHS guidance specifically allows releasing the fact that a patient has been “treated and released” (or is no longer at the facility) as part of that directory information. It is treated as reflecting the patient’s location (no longer in the facility) and general condition.”

Absolutely correct. As long as the health care provider does not disclose the specific health issue, diagnosis or treatment, no HIPAA violation.