I would be asking those questions of the place that you were at when it happened..
Drs office , state agency, ???

- where were you , how/why did the person have access to your files?

Why was that person looking in your records?
What authority did they have to be looking at your records?