Just a question. My friend's younger brother is gay. He is 17 and dating a 22 year old. I've talked to the kid to try and help him with his sexuality, and we've become decent friends. Anyways, a few weeks ago his father found out he was gay and his parents assaulted him. His father hit him with a hockey stick in the face and his mother verbally bashed him until he ran outside and the neighbors called the cops. He was transported to the nearest Methodist hospital which also happens to be the place where his mother is employed. Everything ended up simmering down, but I have a question. One of the supervisors told his mother, who is also an employee, a distinct physical description and summary of the discussions between the patient and everybody who visited him. This was apparently in effort to find out who the boyfriend was. Does this violate any HIPAA laws, especially since it was known throughout the hospital that he was there for family domestic violence? This hospital has a reputation for valuing the "Methodist" part more than the "hospital" one. What is the best route to file a complaint? There have been no real repercussions from this, the boyfriend wasn't assaulted by the family or anything, but surely this is a problem...I went to visit him also, and the supervisor told his mom my physical description, as well as everything we talked about as she was listening from the nurses station.