My classmate is arguing that we are able to legally access EPIC outside of the hospital to write our care plan... is this legal?

My classmate just sent us directions on how to remotely access EPIC on our computers at home, using an app provided by the hospital (CITRIX). However, my other classmate says that this is against HIPPA, since we technically don't work there. and while she is accessing it for educational purposes, it's at home. Isn't that illegal? I couldn't find anything about accessing the records at home, only at the hospital. I want to provide evidence to her that this is wrong because she is fighting back :/ but hey, maybe I'm wrong?

TLDR: is accessing EPIC at home to complete an assignment outside of clinical legal?