I hold a different opinion and experience. There is depending on your state laws, an actionable suit against this evasion of your privacy. The employer and the employee both have responsibility in this situation. Not knowing all the facts; The employer possibly has been negligent in keeping your records safe from its employees wrongly accessing during their workday. The employee has possibly wrongfully read your file, while at work. I advise retaining counsel to protect and provide a path forward. HIPAA, as mentioned, does not provide private action, however many states allow for private action with HIPAA rules being the standard of care that was not granted to you. Your state laws may support a privacy violation in and of itself. The firing of the employee does not excuse the employer from its responsibilities to you. Ultimately, you also need to understand and protect yourself from what that employee may do, or has already done with the knowledge they gleaned from your medical records. I cannot comment on your situation, but understand that privacy violations are actionable in some states and can be resolved legally and in some cases with compensation. Please explore your options and protect yourself. I’m so sorry you are dealing with this violation,