The Empowered Patient Coalition provides resources enabling patients to take control of their medical treatments.

HIPAA (Federal Privacy Law)

Most patients believe that their medical and other health information is private and should be protected, and they want to know who has this information. The Privacy Rule, a Federal law, gives individuals rights over their health information and sets rules and limits on who can look at and receive health information. The Privacy Rule applies to all forms of individuals' protected health information, whether electronic, written, or oral. The Security Rule, a Federal law that protects health information in electronic form, requires entities covered by HIPAA to ensure that electronic protected health information is secure.
If you believe that a covered entity violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy or Security Rule, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities.
A covered entity is a health plan, health care clearinghouse, and any health care provider that conducts certain health care transactions electronically.

http://www.hhs.gov/ocr/privacy/hipaa/complaints/index.html