JPP should absolutely file a complaint as this is a clear violation of his HIPAA rights. But Money is right, the fault (or penalty) lies with JPP's provider(s)...not ESPiN/Schefter. It's absolutely, completely , 100% sleazy journalism on his and ESPiN's part; not that I expect anything less from that "news" organization. But it's up to the medical provider(s), insurance carriers, health care professionals, and JPP to protect his PHI. I'm going to assume JPP didn't leak his own medical record to Schefter so that means someone at that hospital is at fault. Someone will be fired over this as this stuff is taken very seriously in the health care industry.