Does HIPAA allow a covered entity to "market" its products/services via social media platforms such as Facebook, Instagram, or Twitter? Next, assume that the SmallTown Orthopedic Center, a medical practice consisting of 20 physicians, five physician assistants, three nurses and several administrative staff was excited about the opening of its second office at the other end of SmallTown. To celebrate the opening, the office was hosting a catered dinner party in the new building. The physicians invited all of their current patients, and provided tours to all of the new offices. During the event, the Center's office manager was tasked with taking photos of the guests chatting with the doctors/staff, highlighting the sleek new office space. After the event, the physicians reviewed the photos to find those they liked best and then uploaded those selected to the Center's Facebook, Instagram and Twitter pages. So, did the physicians violate any of HIPAA's rules? If so, which ones. If not, why not. Can covered entitiesincluding health care providers---post anything on social media in an effort to market/promote their practice within the confines of HIPAA