Would YOU be violating the HIPPA regulations, or would this VP guy be doing so? I'd email him back to make sure that you "understood" his orders (and of course to maintain a paper trail). I'd also ask in the email if the patient had waived her HIPPA rights, as you don't want to violate any privacy laws and REALLY give her "attorney" something to gripe about. CYA, KWIM?