Your medical records are considered confidential information under federal privacy rules established by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).But you may still become the victim of improper disclosure of medical records through a data security breach, the improper maintenance of records, or the unauthorized snooping of your paper-based patient file..