I work in a medical office that is part of a local hospital. A few years ago after being hospitalized on an urgent basis I was diagnosed with a chronic medical condition. I was off work for 1 week. During this week I happened to run into a co-worker. When I started to talk with her about my medical condition she informed me she knew all about it as she had pulled up my medical record on the office computer and read all of my hospital notes, doctor reports, test reports, etc. She also shared this information with all my co-workers. I discussed this with my supervisor at the time and am not sure what, if anything, occurred with my co-worker. My question is: Is there anything else I can do about this HIPAA violation? It has destroyed my ability to share all necessary information with my physicians as I do not feel my co-workers need to read everything about me (I have nothing to hide but just don't feel like my medical information is my co-workers' business). I also resent the fact that my right to decide if I wanted to share this information with my employer and co-workers was taken from me. The other issue is this co-worker was promoted after doing this to me (and eventually another employee) and is my current supervisor. I am not able to trust her and am having lots of difficulty finding any respect for her as a boss. Any suggestions would be appreciated.