My former supervisor shared my medical information with another staff member. Specifically, I commented that I could no longer trust her, and she told this man that I was struggling with menopause. I have since learned that she also shared this information with her supervisor (another man). She did not seek my permission to share this information prior to discussing it. Is that a HIPPA violation? Is there anything I can do now?

Did she view your medical chart and share that information, or was she making a flippant remark because you are in the age range for menopause?

I shared the issue with her because we used to be friends, and we are approximately the same age. I believe she acted maliciously because she is vindictive and retaliatory and wants to see me kept "down" and "in my place".

HIPAA applies to clients/patients of health care providers. If you work at a health care provider AND have received health care there, yes, it's a HIPAA violation. If on the other hand your employer isn't a health care provider OR you haven't received health care there, then no, it's not a HIPAA violation.

It is, however, a violation of privacy. I'd take it up with Human Resources and file a complaint.

Vasily

As Vasily noted, you voluntarily shared a personal issue (whether it was medical or not) with another person (not a health care provider). Therefore, there is no HIPPA violation. Frankly, I see nothing more than a breach of trust between friends. Your employer isn't involved, HIPPA isn't involved, no laws were broken.