Obviously, this won't help you, rs, but for others:
1) File a restraining order/VPO. This is controversial, in many aspects, some will take it as an escalation, some will back off. In the most primal sense, this is a legal defense in the event that one must shoot the stalker or run them over. In the legal arena, this demonstrates clear definition of unwanted contact.
2) Nevernevernever give out private contact information. If your job in some way requires it, use a pre-paid ditch phone. In the event that the stalker is just going great guns, this is nice in that one can leave the phone with LE, and they can interact with the individual.
3) I can appreciate compassion for the under-privileged and under-served. However. Despite the earnest desires and claims of sociological theory, developmental psychology is more accurate in noting a strong ego-centric, asocial, pathological drive in a large section of this community, i.e., "predatoristic". I would hope that few of us would go straight for cuddles with a feral cat- occasionally, one can get away with this; generally, however, it ends badly. Patients have their own agendas and not-always-well-adapted gratification models. Treat them like feral cats, and you will be compassionate, caring, thoughtful- and protected.
I am, however, confused as to what HIPAA has to do with this. When the law is violated you are released from HIPAA for police investigations.
My suspicion would be that the BON was viewing contact outside of the workplace as, "use of intimate/confidential knowledge in inappropriate fashion", which would technically be a HIPAA violation. I.e., one could not be charged for a violation of the Act itself, but the Act itself is used to define appropriate/inappropriate behavior.
I'm not a lawyer, but I've been around the rodeo a few times, as it were. Legally, my take on this would have been the acknowledgement of the fact that women are more commonly victims of DV and stalking because of their reticence to have "hard" social boundaries, in conjunction with the established environment and social structure of care, resulting not only in the recognized potential for abuse of patients by care-givers, but of the care-givers.