I agree with Attorney Knutson, but would also point out that while the HIPAA law may not have been violated, you might very well have violated the policies of the facility put into place to protect patient privacy.