It is illegal to share protected health information under HIPAA, but the act also does not let people sue for monetary compensation after a breach. If you believe your health information was shared illegally, you can file a complaint with the U.S. Department of Health and Human Services.