HIPAA does, however, have a section explicitly governing the privacy of patient medical information, under Title II, generally known as "The Privacy Rule".
EDIT: Tone and specificity.