HIPAA doesn't provide a private cause of action for its violation. Only the U.S. Department of Health and Human Services may maintain an action for violation of HIPAA. Your remedy under HIPAA is limited to filing a complaint with the health care provider that you believe violated the statute. You may, however, have a private cause of action for invasion of privacy under state law. Consult a local attorney to discuss that possibility.