It sounds like a pretty open and shut HIPPA violation. The question is, do you really want to go after your doctor / his practice? If you have an ongoing issue, this may not be your best approach.
Perhaps a friendly but stern talk from you to the doctor might be a better approach.
“It sounds like a pretty open and shut HIPPA violation.”
See my #5.
Also:
http://searchhealthit.techtarget.com/definition/electronic-protected-health-information-ePHI