Most of the time "medical malpractice" is associated with physical harm to a patient that results from a medical mistake like a surgical error or a misdiagnosis. But medical malpractice can also have an administrative component, which includes injury to patient privacy rights.
The right to privacy of your own health information, including hospitalizations, surgeries, other treatments for physical and mental health, health-related counseling, prescription medications and more, is one of the most intensely private areas of anyone's life. Federal laws, like HIPAA, act in concurrence with state laws to protect that privacy. Violations of either federal or state laws can result in both civil and criminal lawsuits against both individuals and health care facilities for willful or negligent behavior that results in unauthorized disclosures of patient information.