I work as a federal police officer. A co-worker of mine revealed to me that my former detachment commander showed her my medical records and made disparaging and derogatory comments about the contents. Is this a privacy act violation and if so what do I do about it?