I agree it&#x27;s shady, but it might not be a HIPAA violation- The lab company hierarchy has a valid &quot;need to know&quot; about lab tests being performed under their responsibility in order to do their jobs correctly.