Sorry, let me clarify.<p>I&#x27;m not saying they were automatically relaying name&#x2F;job&#x2F;tests-requested of everyone coming in.  I was just bringing that up as the level of &quot;need to know&quot; that the hierarchy would need to have in order to <i>automatically</i> have access to the key details in the story.<p>Second, I agree that the conversation with the manager is fair game (or at least, not a HIPAA violation) to relay to the head of communications.<p>Nevertheless, look what happened: the HoC (Buchanan) was pre-emptively given at least the information that Buhr <i>went to the clinic</i> (not simply that she spoke to a manager).  That is itself borderline.<p>But Buchanan was probably <i>also</i> informed that she asked about the specific test in question.  That sounds very much like a HIPAA violation, just as it would be if you released to the Quest Labs head of PR that so-and-so asked for an HIV test.