I work in a residential group home for mentally ill adults. I have to keep telling my boss that displaying full client names on bulletin boards and desk tops is a violation of HIPAA. She has removed most of the posted memos that contain client names, but all the client charts, with their full names displayed, are kept on a bookshelf in the office--visible to anyone who enters the office. Isn't this also in violation of HIPAA?