I did HIPAA readiness assessments years ago, when HIPAA was all the rage. I dont think you did anything wrong with regards to HIPAA; you had pt permission (I would definately get a letter to that effect from the mom). Your hospital, tho, may have so...