Don't want pictures taken to protect their privacy, don't have the testing site in an open space like that. If the picture is taken from public property, they can't do shit, they certainly can't do shit if the property they are doing the testing on is/was public. HPPA is full of holes by the way. Last it applied to me, you could only be charged with a violation if you were on record has having been trained on HPPA.