I have a friend who's a programmer. When they have a s^1*ty day, they can choose to whine to me about it. What this user said, what this project manager did, this code a previous programmer wrote was crappy.
I have another friend who works in a hospital. Obviously, their days can be fare worse than a programmer. But, their ability to unwind and tell me about the work day seems constrained by HIPAA regulations.
But I'm assuming HIPAA is not a blanket "You can't say you work for No Such Agency" type rule (I have at one point read NSA employment handbook, and that is exactly what they stated).
So what exactly is the line that distinguishes HIPAA-protected information from general healthcare workplace information that can be shared with a friend?
E.g. presumably they can't say "John Doe had an episode of arrhythmia last night on my shift". But can they say "I had a patient with arrhythmia episode" without naming names? Or describe patients in generic demographic terms? ("dealt with a demanding middle age woman patient who kept whining")?