Joanie is on the phone with Sam, a patient, when Mrs. Smith, a busybody, comes to the window to sign in for her physician's appointment. Joanie continues the conversation with Sam, who has been diagnosed as HIV positive. Mrs. Smith is the next-door neighbor to Sam and recognizes who is being discussed. When she leaves the office, Mrs. Smith tells the neighbors that Sam has AIDS and they should be very careful. What did Joanie do that was unethical and in violation of HIPAA regulations?