No, I don't think I will. Reporters covering public policy matters and obtaining records from covered entities have First Amendment protection arguments that a conspiracy among insiders and external mules to sell health information don't have. But none of this is my point. I'm not arguing that it would be impossible for Boudin's office to allege wrongdoing. I'm arguing that they failed to do so. Like, a really basic thing: where'd she get the X-Rays from? The allegation doesn't say.

I'm commenting on the specific thing Boudin's office (inexplicably) wrote about this particular reporter. I'm not making a grand statement about HIPAA.

(I don't know anything about the reporter other than that they worked for ABC7 in SFBA and not like GatewayPundit).

It would depend on exactly how the records were obtained. If hypothetically she paid a nurse $100 for it (and had done so many times in the past), that could be criminally liable. In practice, no-one would prosecute over a single x-ray. But when a reporter gets legally protected medical information "somehow", an insinuation that a legal violation took place at some point to effect that is not unreasonable.