If a visitor enters or obtains information by improper means, staff could have privacy or security concerns, but the issue is usually facility policy, consent, or security, not a HIPAA violation by the visitor.