Prolly proceeding under some HIPPA statutory liability provision. I would say either she waived her privacy rights or award her one dollar in damages.