The healthcare provider violated HIPAA and should be prosecuted.