HIPPA does not apply to an employee-employer drug testing situation. Disclosing the results of such testing is perfectly permissable since HIPPA only applies when one's treating physician (or assistants in the treatment of a person) disclose medical information to a third party who is not in the medical field without the patient's express written permission. The only protection you may have here is if such a disclosure violated the terms of an employment contract or union agreement.