HIPAA Health Insurance Portability and Accountability Act
The HIPAA privacy rule establishes a national minimum standard, and then there are additional state laws for Alabama. HIPAA violations only apply if there is insurance involved.
State Board of Medical Examiners is the governing body for the State, and information about potential violations, whether your doctor is covered under the Act, and more can be found on their website.
OCR of the Dep't of Health and Human Services is the federal governing body to enforce HIPAA. Here is their website. You can sue for civil violations and get up to $1,500,000 under the HIPAA statute. This website will tell you how to file a complaint, but here's a shortcut link. Contact a lawyer if you have difficulty understanding the complex administrative code for the HIPAA Act.
Knowingly violating HIPAA statutes is a criminal violation. Dep't of Justice is the enforcing body. $250,000 penalty and 10 years in prison for some violations. Try to define "knowingly" so that it fits your set of facts.