Some bloggers are criticizing the “unnamed Atlanta medical official” who revealed Mr. Speaker’s identity:

We seem to agree that at least one of the anonymous sources who gave or confirmed the patient’s name to the media may have violated one or more laws. My thought was that the unnamed “Atlanta medical official” violated HIPAA if the patient’s identity was discussed within the official’s professional work related to the case. There’s no individual cause of action under HIPAA, but perhaps the patient’s lawyer could use HIPAA to establish standard of care that has been violated (should he want to sue; so far there has been no mention of it and this is just food for thought on my part).