Although roberta had signed a form preventing her doctor from sharing her personal medical records with the company she worked for, she later discovered that the doctor's office had, in fact, shared her data with her health insurance provider and her employer, which caused her to be terminated. because the doctor's practice violated its own privacy policy, she was able to file a lawsuit under the