Montez threatened to go after Hodges for HIPAA violations because he was given private medical information by his nurse friend. The onus of confidentiality under HIPAA is solely on the medical establishment and its employees, not a private detective.