Actually it is HIPA. Health Information And Privacy Act. Some of the other acronyms may have their own place but not in this issue. Now if the optometrist lady had disclosed a social security number, divulged a diagnosis, or compromised 'other' "pertinent personal information that was obtained by others that would have been used to cause damage or harm" then there might actually be something to this. But since you seem to know everything already, I'm sure you knew of this. Don't quit your day job, unless it is a law practice. For you clients sake.