Public health reporting is mandated by law and is not affected by the Health Insurance Portability and Accountability Act (HIPAA). HIPAA specifically provides for public health reporting without a patient's authorization or consent.

http://www.cdc.gov/mmwr/pdf/other/m2e411.pdf