Answer (1 of 9): I assure you, unless you gave written consent for her to do it, this is a violation of HIPAA on TWO counts: Your mother asking for the records and accepting them, AND the physician's office for giving them to her. Both entities, your mother and the physician's office, could be ci....