how would I create a procedure on who to inform of a patients diagnosis and how would HIPAA impact the reporting process? Thanks for your help