I moved this post off the medical stack exchange as it was flagged as off topic so hopefully this is the proper place for it.
I have a problem with a thumbnail that has been lingering for months now and I finally decided to make an appointment with a dermatologist. I called, made the appointment, filled out the paperwork, etc. I showed up for the appointment and all was normal, scanned my drivers license, took my co-pay and confirmed my medical history. They called my name and took me back to the room and the assistant asked to take a front and side picture of my face. I noticed a screen on the wall showing before/after shots of patients facial problems so I told the assistant that I was there for my thumb not any facial issues and she said it was for their records. I said I didn't mind if she took a picture of my thumb but that I didn't see any reason to take pictures of my face. Her tone immediately changed and she quickly finished the interview and left the room. A few minutes later a women walked in and introduced herself as the office manager and explained to me that it was their policy to take pictures of patients for "security reasons" and that I would be refused service if I did not comply. I politely told her I understand she has to follow her policies and asked for a refund of my co-pay which she provided then I left the office. Can a doctor legally do this? Is this a violation of HIPAA? If so where would I file a complaint?