The best way to understand if something is a HIPAA violation is &quot;Can someone who isn&#x27;t the patient or doctor find any PHI?&quot;<p>So unless Santa stores health information in his Naught&#x2F;Nice list, he&#x27;s HIPAA compliant.