Wrong jOe

"Medical Privacy" rules enacted under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) came long after State laws requiring written permission to test for HIV and penalties for disclosing the results

Getting access to your medical records is not hard for "the government" if the NSA is interested
https://www.aclu.org/other/faq-government-access-medical-records

https://www.eff.org/issues/law-enforcement-access
HIPAA permits the police to use an administrative subpoena or other written request with no court involvement, as long as police include a written statement that the information they want is relevant, material, and limited in scope, and that de-identified information is insufficient.