Hello and thank you for contacting us. This is Dwayne B. and I’m an expert here and looking forward to assisting you today. If at any point any of my answers aren’t clear please don’t hesitate to ask for clarification. Also, I can only answer the questions you specifically ask and based on the facts that you give so please be sure that you ask the questions you want to ask and provide all necessary facts. Please note: This is general information for educational purposes only and is not legal advice. No specific course of action is proposed herein, and no attorney-client relationship or privilege is formed by speaking to an expert on this site. By continuing, you confirm that you understand and agree to these terms.
I can discuss this with you but I'm sure he was talking about your HIPAA rights and courts don't allow private citizens to file civil suits for HIPAA violations. Most people don't know this but the courts ruled on this matter many years ago. You can read abuot a recent ruling by the TN Supreme Court at http://www.insidecounsel.com/2013/12/03/tennessee-supreme-court-dismisses-lawsuit-on-hipaa
Many lawyers are now looking for a way around this by alleging other causes of action, etc. but none of them have been successful so far, at least all the way to the supreme Court to get a final ruling on this. You can certainly hire a lawyer and try to be the one that "makes the law" on this type of case but it is going to be an expensive endeavor.
The law does allow the state Attorneys General to file a civil cause of action as well as the Department of Health and Human Services. You can contact the DHHS and file a complaint using the information at this page: http://www.hhs.gov/civil-rights/filing-a-complaint/complaint-process/
If You have any additional questions about this please feel free to ask them in this thread. Many people don't believe the law is as we say it is so I'm nore than willing to provide links, etc. to substantiate my information, just as I did above.