re: Is anyone here a HIPAA expert?

Even though pharmacy personnel undergo HIPPA training, the key is to have a conversation with the employees (preferably the RPh) and let them now the basics. Generally, most pharmacy software has patient notes and they can add something to the effect that NOBODY can pick up or ask shite about her medical info. If they are incompetent, then bad things could possibly happen with info.

Unless she has legal papers that give said stepdad access to her medical info, she should not be worried. We never mail any medical or drug information to an address. That would be dumb and open up the business to all kinda troubles. The biggest issue is picking up drugs at the pharmacy, which people can do for family if they know basic info. Either transfer the rx's to a new pharmacy of have the pharmacy put a note that nobody can pick up her meds but her or a designated acquaintance.