Thank you for your question. I look forward to working with you to provide you the information you are seeking.
What you describe is a HIPAA violation and also a violation of the NY confidentiality
of medical records laws. Under HIPAA, there is no private cause of action or right to sue. Under HIPAA, the US Department of Health and Hospitals is the sole agency that is tasked with investigating and issuing sanctions for violations of HIPAA. Thus, you need to make a complaint with the US Department of Health regarding the improper viewing of your records without medical necessity. New York's general medical records statute (N.Y. Pub. Health L. § 18(6)) permits disclosure of general medical records to “practitioners or other personnel employed by or under contract
with the facility.” This means if those who viewed the records had no legitimate medical need to view the records you would have grounds to sue them for damages you suffered for the breach of confidentiality.
Thank you so much for using JustAnswer.com. I truly aim to please you as a customer, but please keep in mind that I do not know what you already know or don't know, or with what you need help, unless you tell me. If I did not answer the question you thought you were asking, please respond with the specific question you wanted answered. PLEASE use REPLY to EXPERT if you would like more information or if you feel something was not included in your answer.
Kindly remember the ONLY WAY experts receive any credit at all for spending time with customers is if you click on OK, GOOD or EXCELLENT SERVICE even though you have made a deposit or are a subscription customer. YOU MUST COMPLETE THE RATING FOR THE EXPERT TO RECEIVE ANY CREDIT, if not the site keeps your money on deposit.
Also remember, sometimes the law does not support what we want it to support, but that is not the fault of the person answering the question, so please be courteous.
Second, under the NY con