Wrong.
HIPAA laws allow, of course, for Court Orders.
They can subpoena any medical records they want and the keeper of the records. The witness will state they have the records but will be unable to release any information without written authorization