AITA for telling my sister what she said is a HIPAA violation and she shouldn’t share personal information?

In a room filled with familiar faces, a family gathering turned into a silent battleground of ethics and respect. When the sister, confident in her healthcare role, casually exposed private medical details about a relative, it wasn’t just a breach of confidentiality—it was a painful reminder of boundaries crossed and trust broken.

Caught between loyalty and principle, the narrator dared to call out the violation, risking alienation to defend the dignity of another. But instead of gratitude, they faced cold silence and harsh judgment, revealing how standing up for what’s right can sometimes come with a heavy emotional cost.

AITA for telling my sister what she said is a HIPAA violation and she shouldn’t share personal information?

My sister works in healthcare and seems to like her job. She also likes to judge others and make comments about their lifestyle, especially if she doesn’t agree with it. Recently, we had a family gathering and she was talking to our dad about one of his cousins, in front of a room full of people.

She brought up the topic by saying something like, “Isn’t Dave one of our cousins?” She then tells our dad (so everyone in the room) that said cousin recently came to the hospital for treatment for “xyz” illness and mentioned some other stuff about his medical background.

I just looked at her and said “HIPAA violation” in a sing song voice. Someone else asked what HIPAA was and I explained it meant that people’s info is supposed to be confidential and not shared willy-nilly.

She glared at me and then proceeded to ignore me the rest of the night. Later, I was told by another family member that I shouldn’t have called her out and I “know how she is”. Honestly, I get tired of walking around egg shells and I seem to be the only one that will challenge her/call her out.

But, now I’m wondering if I really was the AH?

Here’s how people reacted:

Fun_Revolution_5906

NTA. Report her because that is a serious breach of confidence. There is actually no ground for her to stand on.

I would understand if maybe she was speaking about a random patient because I can imagine as a doctor sometimes you may need to get stuff out and would share(but also not in front of alot of people) but the person she spoke about was a relative and thus everyone knew them so serious breach of confidence and even if it wasn’t a relative or someone everyone knew, she named and shamed him and that is a major breach of confidence. You should at the least tell Dave and hopefully he sues her for it.

Business-House-8232

NTA

You should tell Dave and report your sister to her place of employment. That’s a huge violation of Dave’s personal sense of privacy and security, and hospital policy. I’m not usually one for people losing their jobs, but I think it would be warranted in this scenario. I worked at a hospital in a non-clinical setting for years, and the hospital can’t even confirm whether or not a specific person is a patient at that location, let alone allow their employees to share private information with anyone. This is a major issue that deserves to be treated as such.

The_Nood1e

What she did was wrong, but not a HIPAA violation.

HIPAA’s rules apply only to sharing information between “covered entities.” The U.S. Department of Health and Human Services describes covered entities as “health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically.”

So, again, wrong, but not covered by HIPAA.

nom-d-pixel

NTA for shutting her down and stopping her major ethical violation. However, HIPAA does not cover sharing information with individuals. It is about businesses like insurance and employers sharing information. However, her employer and the state medical board have strict rules of their own to prohibit what your sister did, and I am sure that Dave would have a problem with it.
WiseBat

NTA. It is indeed a HIPAA violation and “that’s just how she is” is a way of saying “she sucks, but we can’t do anything”. Her job can, though, and if she spouts off to the wrong people she’ll be out of a job—wink wink, nudge nudge. You should give Dave a heads up that she’s discussing his medical history, and give him the opportunity to decide how to handle it.
Internally_fuming

NTA – healthcare workers can talk about work BUT they should never mention specifics. What she is doing is a HUGE violation of privacy and everyone in your family should understand that. If your cousin Dave finds out he could have her fired, easily.

Like seriously, it’s basic healthcare 101. I applaud you for doing a singsong voice at her

Jauntrianna

NAH in my opinion. Even if they are family, such information shouldn’t be shared like that. She could easily lose her job doing that.

Also the rest of the family should call her on it. If they go to where she works they know she will tell the rest of the family what is wrong with them even if they don’t want her to.

KatzAKat

NTA. Your sister is one of the big reasons why HIPAA was implemented. Information learned on the job is not supposed to be discussed. It’s a fireable offense. And, no, no one would be getting her fired except for herself. She’s had more than sufficient training to completely understand the system.
RayofFnSunlight

NTA. If the hospital knew she was doing this, she would be fired. Also? She should have disclosed to the hospital that she was related to the patient and depending on the hospital, she wouldn’t be permitted to be involved in his care/access his chart at all. She should know better.
CDM2017

She didn’t share the info privately, she did it in a room full of people. So why should she get a private rebuke?

You did the right thing in the moment. The right thing NOW is to report her. What she did is a gross violation and there’s no way she doesn’t know that.

MsBlondeViking

NTA. Imo she deserves to lose her job over this. I would be beyond furious if someone I knew gave out my personal info. Family or not! This is how people’s personal info gets stolen. She should be thankful you’ve handled this so kindly!
Drakontus

NTA and honestly I would report her. What she’s doing is against the rules and it’s probably not the first time. Her employer needs to know this.
RedditDK2

NTA – report her to the hospital she works for. Our better yet – tell Dave and let him decide what, if anything, to do about it.

Conclusion

The original poster (OP) felt compelled to publicly confront their sister over sharing private medical information at a family gathering, viewing it as a necessary step against her judgmental behavior and a perceived violation of patient confidentiality rules. This action caused immediate tension, with the sister reacting negatively and other family members suggesting the OP should have remained silent to maintain peace.

Was the OP justified in prioritizing the principle of confidentiality and addressing the sister’s inappropriate disclosure publicly, or was the confrontation inappropriate because it disrupted the family setting and disregarded the sister’s established behavior pattern? Where does the need for accountability end and the need for family harmony begin?

Categories Uncategorized