GP's comment paints Alice/Bob/Charlie as people: >If Alice tells her coworker Bob that she had diabetes, it's not a HIPAA violation for Bob to tell Charlie. I

GP's comment paints Alice/Bob/Charlie as people: >If Alice tells her coworker Bob that she had diabetes, it's not a HIPAA violation for Bob to tell Charlie. I was responding to the parent comment's claim that it's not a HIPAA violation but rather a GDPR violation.