HIPAA is actually pretty terrible in terms of protecting your privacy from government agencies (or from insurers). It can require covered entities (health care providers, plans, or clearinghouses and buisness associates) to hand over medical information to law enforment officials without patient consent, and can even ban covered entiities from informing patients about disclosures under some cirumstances.

The EFF has a lot more detail here: https://www.eff.org/issues/medical-privacy and more specifically: https://www.eff.org/issues/law-enforcement-access