My doctor broke HIPAA law and almost gave my mom a heart attack

Depending on what was said in the conversation and what it was about, technically yes, though some providers are much more cautious than others. Check the CFR and the providers privacy terms.

(b) Standard: Uses and disclosures for involvement in the individual's care and notification purposes -

(1) Permitted uses and disclosures.

(i) A covered entity may, in accordance with paragraphs (b)(2), (b)(3), or (b)(5) of this section, disclose to a family member, other relative, or a close personal friend of the individual, or any other person identified by the individual, theprotected health information directly relevant to such person's involvement with the individual's health care or payment related to the individual'shealth care.

(ii) A covered entity may use or disclose protected health information to notify, or assist in the notification of (including identifying or locating), a family member, a personal representative of the individual, or another person responsible for the care of the individual of theindividual's location, general condition, or death.

/r/legaladvice Thread Parent