· If a patient has not explicitly authorized disclosure to those individuals, disclosing the requested information is a HIPAA violation. Nurses should take the time to check patients’ records for signed release and authorization forms. A person not named in such a form cannot be privy to protected health information. 2..