A friend won a lawsuit against a company he worked for. The damages portion of the case is separate from the liability portion. The defense attorney ordered my friend to undergo a MMPI2 (psychological evaluation) and then released John’s results publicly. Is that legal? Or is it an invasion of John’s privacy? Joh is now getting quite a bit of heat from the results. Did the defense attorney violate his HIPAA rights?