Yeah the sticker sentence especially. That's essentially the same as saying that the kid got the shot. HIPAA doesn't say "it's ok to reveal private health information as long as you do it in a wink-wink manner." Revealing personally identifiable health information is forbidden no matter how you do it.