> I'm afraid to report it bc I know PCHC will retaliate against me.

Retaliation is a huuuuge no-no and can result in the loss of license to practice as well as some really heavy fines. The regulatory bodies for healthcare providers in the state can and will absolutely fuck them up for this.

https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html

What you took a photo of us a pretty clear violation of HIPAA - those documents, if they contain HIPAA-protected data (PII and the like) - are required to be in a folder with a cover sheet when not in use. Reconciling the sheets on clear display with actual physical copies by the investigatory body will take like two seconds, and they'll be at fault. The fact that you were able to snap a picture of those documents is absolute proof that a violation occurred.

Report it.