I'm not a lawyer, but I happen to see this post and know the answer, so I thought I would reply. I've working in medical compliance for over 5 years, so I'm pretty familiar with the rules and regulations. WalMart did in fact violate HIPAA when they gave your information to your spouse. The only time information can be released to ANYONE other than you is if you have signed a HIPAA waiver form specifying who is allowed to access information on your behalf (except in instances where medical records are required for a lawsuit or other legal reasons and this is obviously not one of those cases). I know you are supposed to file a complaint with the Office for Civil Rights within 180 days of finding out about the violation, but I don't know their contact information off hand...I'm sure you can Google it. I would also file a formal complaint with WalMart and let your insurance company know as well, because in instances like this, it is normally not an isolated event. The insurance company may want to conduct an investigation. I'm sure you also have a million legal rights as far as your spouse using that information for his benefit, but one of the experts here I'm sure can give you more accurate information about that. Hopefully some of that information helped!

