As a healthcare employee, you are required by HIPAA to protect the privacy and security of the personal health information to which you have access. You will have many opportunities to avoid disclosing protected health information.
Here is a simple example:
You are a hospital employee within a critical care unit. Your best friend asks you to look up her mother's testing results since she was recently cared for at your facility. Knowing the HIPAA privacy regulation and your departmental policies and procedures, you do not disclose the protected health information she requests. You politely tell your friend you cannot give her the testing results.