Publishing pictures without authorization + tampered with authorization form: HIPAA-violation?

There may be a violation, but your options under HIPAA are limited. HIPAA does not provide a private cause of action, so the most you can do is...