You’re right on the first claim, but the invasion of privacy count has nothing to do with medical records laws.

You both are right/wrong.