Something they are hoping you don't consider is the fact that HIPPA does in fact extend to individual persons attempting to access your medical privacy. A violation does not have to just pin the company. You can and should file suit against anyone prying into your personal, private information. And more than likely, the company will try to distance themselves from the employee you are suing. This will flip the script on them when companies start struggling to employ fall guys.
EDIT: I really need to wake up more. The thought came to me so I shared it. You cannot discuss people's medical history or status unless they volunteer it, but even then you can still get in trouble if it turns out said someone didn't want that information volunteered. It does not only apply to medical professionals.
All the courts are corrupt and will bend to the authorities. Technically, even according to IRS code, only corporations can be income taxed. They will just point to where there are examples written in the code that says "ex: wages", and won't care how much you argue you are are not a corporate individual, but a citizen. They won't even care how much you argue that your net wages is not the same as your income after all the expenses in order to make the money, like how actual corporations work. They won't care that you argue that your paycheck is a barter for your services. They don't give a fuck about anything. Show me a single court that will follow these laws as they are written, and not how the IRS lawyers say it is.
You will go to court and beg them to not call the mandate a law and they will say that it is. Nothing is stopping them from doing it and they have big dogs behind their backs if they don't.