If these people are not from a public health agency that is legitimately performing activities to actually mitigate and stop the spread of a disease as defined under the exemption clauses of HIPAA with regards to a situation in which protected health information (PHI) can be disclosed without the prior written consent of an individual patient, then this is a violation of HIPAA.
If these people are not from a public health agency that is legitimately performing activities to actually mitigate and stop the spread of a disease as defined under the exemption clauses of HIPAA with regards to a situation in which protected health information (PHI) can be disclosed without the prior written consent of an individual patient, then this is a violation of HIPAA.