Few realize it, but that HIPAA privacy law started out as HillaryCare. It’s all she could get through. It would be a very appropriate club to use on the Slimes.
For example, I work in medical billing. If during the course of my work I find out you have an STD, and I tell your wife, without permission, that is a HIPAA violation. But if I see you if a grocery store, and you tell me that you have an STD, and I turn around and tell your wife, that is not a violation, that is just gossip.
So in this case, the NYT would not be in violation, but whoever told them could be if they originally got the information from medical records.