HIPAA doesn't apply to everybody, just practitioners
whoever gave Mayweather access to the images (if it's not his girl herself) may have broken the law but he can do whatever he wants

that said, he's a piece of shit for this for sure

*correction: he may not do whatever he wants, but I don't think HIPAA has anything to do with