In her role as an Ohio State employee and health care provider, can she legally say anything to anyone? I'm not playing devil's advocate, I legitimately don't know. Between university policy and HIPAA regulations, can she legally share this info with anyone other than superiors/police? I realize the victim isn't a university employee, but the WR coach is. The pictures weren't shared as part of a medical appointment, but not sure on the expectations of nurses.
No, HIPAA would not come into play at all. HIPAA is only a factor for "covered entities." Covered entities are pretty clearly defined by the law. Put it this way. If you're friends with a doctor, and you send him/her a picture of an injury in a non clinical capacity: "Check out this poison ivy rash!" and the doctor decides to share it with his/her spouse, there's no HIPAA violation. You're not a patient and they're not a provider in that scenario. But, let's say you sought treatment for the rash at the doctor's office, and then later texted them a picture of the rash, saying "I think it's getting better" HIPAA would be more likely to come into play, if they shared it.
simply put, HIPAA is not a reason why Urban's wife wouldn't tell him, or anyone else in authority, about this. It's just not. She's a nursing instructor, so I'm sure she's familiar with HIPAA, as well as Mandatory Reporter laws. She would not be penalized for reporting an abuse situation, and as a nurse, she would know that.