I am wondering if it is a hipaa violation for a sleep study agency to disclose sensitive iformation regarding myself to my 12 year old son, and if so what is my legal recourse.

Did they call your home and tell him on the phone or was he standing there while you did your study? Give us details how this happened,

Need more info - how the info was conveyed, what info was conveyed.

The information was given to my son over the phone, even though my son explained who he was and gave the sleep study agency my cell phone number

Your legal recourse is to report this as a violation of HIPAA - if the information harmed your relationship with your son and you suffered emotional damages (or he did) I "suppose" there's a lawsuit for that - but, quite frankly, I don't see it.

Health Information Privacy (http://www.hhs.gov/ocr/privacy/index.html)