HIPAA regulations protect and control the use of patient information

HIPAA regulations protect and control the use of patient information; however, there are still circumstances in which patient health information can be used or disclosed for marketing purposes. For instance, patient information can be disclosed to-market nominal products or services. Is this ethical? Why or why not?