The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)
Not sure of the answer right off hand, but I would say yes, it would violate HIPAA compliance for the site. I suggest you open a support ticket with Atlassian for a definitive answer.