It is not illegal to take photos in hospital. However, when a photo is taken in hospital by a Covered Entity or a member of a Covered Entity's workforce, what happens to the photo after it has been taken is governed by the HIPAA Privacy and Security Rules.