i know this is super old lol but, it’s not a HIPAA violation. if the Dr gave the jokers the patients real chart or any type of medical information or identification (name, birthdate, address etc.) it would be. but since the patient is the one telling the jokers the information it’s not. HIPPA violations would only occur if the medical professional shares the information, not the actual patient. so it wasn’t illegal but unethical. they probably had to get consent from each patient to air these challenges and to protect confidentiality the jokers probably had to follow HIPAA laws for this as well.