The best way to understand if something is a HIPAA violation is "Can someone who isn't the patient or doctor find any PHI?"
So unless Santa stores health information in his Naught/Nice list, he's HIPAA compliant.
So unless Santa stores health information in his Naught/Nice list, he's HIPAA compliant.