When concerns about HIPAA violations were raised, a staffer responded, “Do I need to call Elon?”