What are the causes of action for improper disclosure of health information?  

What are the causes of action for improper disclosure of health information?  Of these, which seem the most likely to succeed? The least likely to succeed?