Serious medical privacy violation
Wondering what to do before consulting an attorney for the following situation. Woman goes to a medical specialist (first visit) with a serious, painful and rare condition in an embarrassing area of the body. During the evaluation the woman gives a full case history and discloses a condition that is relevant to her present problem. Woman says "I am telling you this but don't write it down as I do not want it on my medical record." Medical practitioner does not say anything along the lines of "I must write it down since you told me" or even "Don't worry, I won't write it down." Treatment given doesn't improve condition. Woman hears of another doctor who specializes specifically in the condition that she thinks she has. Woman signs a release giving first doctor permission to send her medical records to second doctor. The cover letter has woman's fax number. The release has the fax number of the doctor to receive the records. Nothing happens as new doctor has not received records. Two days later woman again calls up to find out where the delay is and sends another letter requesting her records to go to second specialist. This time she sends the cover letter from work. Next day woman finds three pages in her inbox at work. The doctor's office faxed the sensitive records complete with diagrams and detailed medical history including the condition that she specifically requested not be put in writing.
About the mistake of sending the fax to the wrong place the doctor's office apologizes: "It's never happened before". Woman did not realize until later about the additional condition being put in writing. Meanwhile woman is not sure who saw this sensitive data and if any of it was shared with other co-workers.
Woman is not going to lose her job based on what was revealed, but she is extremely uncomforable about who knows what about her private business. Also, if woman sues how likely is that to affect her receiving medical care in the future? Any comments aside from consult an attorney and report this to the state board and HIPPA?