My soon to be exhusband (former hospital employee) commented to me about a breast implant issue I had years prior to meeting him. (He commented me not sharing with him I had a leak in my implant.) This was never true but made me remember my doctor requested a mammogram at the hospital he worked at to rule out a leak. I filed a complaint with the hospital a week later they gave me a false report that my rights were not violated. I knew they had so contacted the boss to the medical records director. Almost 6 weeks later I finally found out they were violated and they feel it was not the employee on the report but that someone else used her ID. I feel like it isn't enough. I am angry how easy it is for someone to obtain personal information and I am angry I was given false results and I angry it took so long but yet nothing came out of it but we are sorry. What can/ should I do?

Most hospitals are licensed by the state, file a complaint at that level. HIPAA is a federal law so also file with The Department of Health and Human Services