There are no explicit HIPAA social media guidelines because the HIPAA Privacy Rule was written several years before most social media sites existed. The disclosure of personal identifiable information without a patient’s approval, with the exception of approved reasons, is a violation of HIPAA, and posting PHI on social media would fall under this category.