Not necessarily. HIPAA permits certain incidental uses and disclosures of PHI that occur as a by-product of a use or disclosure otherwise permitted under the Privacy Rule. However, you still must reasonably safeguard Protected Health Information, such as by talking in quiet tones and not sharing more PHI than is necessary.