No you can not; it is a HIPAA violation.
If you know of a HIPAA violation, you should report it immediately. These violations are taken very seriously, and the person or company making the violation need to be addressed as soon as possible.
Since we don't know what Betty's actions or the scenario were ... we can't answer the question.
yes
HIPAA regulations are codified in civil law, not criminal law. See related link
Physical safeguards are
all the above
all the above
Established appropriate physical and technical safeguards
all the above
Established appropriate physical and technical safeguards
all the above