Medical information in my opinion is not very private:

The system is not set up that way. Three weeks ago, I was at the hospital three days in a row visiting two sick friends. As doctors consulted with their roommates we could hear every word said, including one that had several psychiatric diagnosises. He asked her if what happened was an attempted suicide. The nurses also did change of shift reports at the bedside. When the doctor came to examine my friend I stepped out to give her privacy, and still could over hear the conversation in the hall. I moved further away, and into several other medical conversations, even a discussion of one patient being a pain in the *****. Today, I found out that the woman with the MI diagnosises was a former teacher at my kid's school.

Years ago, a family member owned a small business, 10-15 professional employees, and he basically always knew who was costing his insurance payments to go up, and he would quietly dispose of that employee. His payments were based on how much his employees used the insurance collectively, and when he would negotiate with them he had data with no names. My relative is dead now, and I don't know the changes in the industry, but if he was doing the same today I would have no qualms reporting him.