This depends on whether the patient has given their consent for the image to be used. If they have, and the image is shared under the conditions of the consent, there is no violation of the HIPAA Privacy Rule. If the patient has not given their consent, the image could be used to identify the patient, and therefore the employee is in violation of the HIPAA Privacy Rule.