The medical school structured itnas a clinical trial with people volunteering to participate. Medical studies have different regulations than just reviewing public postings.

This is a reflection of the way they’ve chosen to go about things - no doubt in response to past kerfuffles - rather than an actual legal obligation on fb’s analysis of public materials.

HIPAA regs aren’t hidden from the public. Peruse at your leisure.