Recently an employee of the Department of Public Safety sent an email to a reporter here in Hawaii which contained the names, addresses, physicians, and locations of plants for all 4,200 Medical Marijuana patients legally registered in the State of Hawaii.
Supposedly, the only people that have seen the list are the reporter, and the editor of the newspaper, but the DPS didn't even acknowledge the incident until after an article was published in the newspaper concerning it, then they waited another 10 days before sending a "form letter" of apology to all 4,200 patients on the list.
Isn't this a clear HIPPA violation because our identifiable personal information was contained in the list?