Was this a HIPAA issue?

[IreneTouTheou]

Probably about 10 years ago while working in the healthcare facility I met a patient who, in the course of conversation, told me that their family had owned a famous business that was really treasured by my parents (and people their age). I think in the course of our conversation we talked about my parents, but I can't recall. The patient had written a book about their family's business and said they'd mail me a copy or two of the book. I'm pretty sure that they said I could share it with my parents, though I can't recall exactly. They mailed me the books and I showed one to my parents, and they shared it with a friend who also loved that old business. It just struck me this evening while looking at something else, good grief, I think I probably told my parents that I'd met this person at the hospital, and they may have shared that with the friend they shared the book with. Of course, in my memory, this may have been okay with the patient. I cannot fathom doing something like this now, these years later. Should I do anything about this now? 

[Corey Narry, MSN, RN, NP]

I don't think this is a HIPAA violation. When I think of HIPAA, I think of PHI which is protected health information. Any mention of patients' identifying information (name, etc) and their health status including exam findings, diagnoses, outcomes, etc is protected from disclosure outside of providing direct care and any actions that pertain to that role. In this situation, as long as you did not disclose to an outside entity what is this individual's reason for being cared for by you, then I think it does not constitute violation of PHI. Also, the patient voluntarily sent you those books and did not make stipulations on how you would proceed with their use afterwards.

[JKL33]

This is not a HIPAA violation and there is nothing that needs to be done about it.