HIPAA is a set of restrictions on those that generate and store medical data. There is nothing in it that precludes voluntary disclosure by the person that the data concern. For example, I have waived HIPAA rights between my medical providers and my insurance company so that they can get claims...