Unfortunately, there is no private course of action under the Health Insurance Portability and Accountability Act (HIPAA). This means that a patient cannot sue anyone directly for a HIPAA violation under federal law. This may be confusing because it is against the law for medical providers to share private health information. However, patients cannot file a compensatory lawsuit if they find their HIPAA rights breached.
However, there are some circumstances where you may be able to sue for violations involving HIPAA under state law. If the breach resulted in harmful violations of your medical information, you may be able to hold the provider accountable.