EC PS: Remember that a HIPAA violation requires the unwarranted disclosure of protected personal health information to someone other than the patient or the patient's representative or participating entity such as insurance, employer, healthcare providers, etc.