I was the assistant to a CEO of a hospital for 20 years. Violation of HIPAA rules is very serious, ESPECIALLY FOR A DOCTOR. This doc is fully aware of this and is doing this because he thinks he can. In order to maintain Joint Commission accreditation, EVERYONE in the hospital had to take HIPAA training, pass it, and a signed document stating that you took it and passed it went into your file in HR.

You would be doing all patients and staff in that facility a big time favor by reporting this (plus observations of his attitude) to the CEO of the hospital with a cc to the doc himself. You could also state the Medical Board and certification board would also like to have this information, if need be.

This is the only way to stop something like this.