HIPAA requires healthcare providers who are covered entities such as nurses to protect patient privacy by not using or disclosing protecting patient health information except as required under federal and state law. However in the event that a nurse needs legal advice about a patient, the nurse may disclose and discuss protected healthcare information with an attorney but under specific circumstances.
Federal whistleblower regulations exist to protect the employee who in good faith discloses protected health information to the attorney for the purpose of obtaining legal counsel otherwise this would otherwise violate the HIPAA standards that apply to covered entities. However this information must be disclosed carefully and de-identified so the disclosure would not disclose any identifying information and would appear as Patient A, Patient B. Also, it is best to have the employee write a summary without including any names or identifying information for the patients in question.