I'm sure it's possible, but extremely unlikely. In a short conversation that I have with the medical office administrator or owners of a medical practices, I typically uncover at least 1 potential infraction. HIPAA is complex and confusing. There are a LOT of jobs to be done and most practice owners are not aware of the mountain of work to get hipaa compliant.