Sevren..this is more for others info, as we have been PM'ing....JUST FYI... HIPAA is an ACT, not an entity, that outlines privacy standards that went into effect 4/12/03....there is a complaint process, and IT MUST BE FOLLOWED....When you file a complaint....YOU START WITH THE PRIVACY & COMPLIANCE OFFICER at the facility where the infraction occurred...in this case it will be the pharmacy also, the pharmacist shouldn't have spoken w/your mom...but if he was discussing Vicodin that your mom told him you got from another source...not via his pharmacy, it was wrong for him to discuss it, but he was not discussing "protected health info" obtained by his practice, nor your medical records w/him specifically....the guidelines are VERY specific....so we need to get ALL the facts together before filing anythin