BTW HIPAA is for providers for their patients information handling. Once it's in the person's hands, it's no longer under HIPPA and it no longer applies. If you decide to put your private medical information on a commercial advertisement board on a highway, and it's not breaking laws to do with acceptable adcertisement (eg gore or smut) you'll be able to do that to.

Basically theres no expectation for a individual person to adhere to HIPPA for their own personal information storage and it doesn't apply.

My assumption with your lawyer comment, is this was a insurance or otherwise medical malpractice lawyer who might collect this information for their client cases, since without having client/patient requirements, HIPPA is irrelevant.