Well he may have violated employer policy (looks like he did), but HIPAA covers only Protected Health Information (PHI) which is defined, among other things, as containing information that identifies an individual.
Did he do that, or not? The article isn’t clear.
Jim is right. Someone’s individual health information has to be revealed.
“Did he do that, or not? The article isn’t clear.”
Hid lawyers claim all info was HIPAA compliant.