My response was essentially, "I can do it, but we will need to explain why we are going against CDC guidelines or else I see a mass problem on our hands. Can you get that reasoning for me so I can share it?"
A few hours later, the request for the memo was rescinded. Big win in my book.
yeah the IT guy who works on a Dr's computer has to sign things re: HIPAA. I'm guessing if you found a patient's medical record file on the street you'd be bound by HIPAA not to do whatever it is you can't do with Px information.