My 4 year old’s speech therapist sent out a mass email to all the parents of children in the practice. In this email the email addresses of all the parents are available to be seen by all recipients. Some of which clearly identify the recipient. Isn’t this a violation of HIPAA laws?