Question about the confidentiality of my personal health information

I have a question regarding the confidentiality of my personal health records and information within the workplace.  I currently work for a health insurance company and have been here for over 10 years.  Three years ago I checked myself into an alcohol treatment program, as I realized I needed to steer away from that in my life.  This was a step I took on my own and took the appropriate time off from work to get it taken care of.  I informed my boss at the time and had her full support.  I utilized my health insurance from the company I work for to cover the services.  My work performance has never suffered from this issue and I can say that I'm 100% on the right track in my life now.

I'm writing because I now have a new boss who wasn't here at the time that this occurred.  I had a meeting with him, where he mentioned that he knew about my past alcohol problems.  This is information he should've never known.  Please look below at the notes I took about this situation.  I'd like to know what my rights are as I feel this situation was unprofessional and it violated my rights.

Notes:

I was supposed to attend a leadership meeting to demo a reporting tool on 10/11/10, but became sick just prior to the meeting and had to leave the office.  I had no opportunity to inform anyone verbally as I was getting sick to my stomach.  I typed a quick e-mail to inform my boss of the situation as I was outside after getting sick in the parking lot.  The timing wasn't good because it was just prior to the meeting, but there wasn't much I could do about that.

I sent a follow-up e-mail stating what had happened and that I was sorry for the unfortunate timing of everything.  I also asked if there were any take aways I should be aware of for future work.  I didn't hear anything back until my boss set up a debrief a week later.

During the debrief meeting a week later, my boss confronted me about leaving sick and how it put them in a bind.  He wasn't very happy.  I explained again what had happened and was sorry about the timing of it all.  He then mentioned he knew about my past problems with alcohol and thought this could be indicative of something like that going on again.  He said he had previously talked to another manager about this as well.  

My boss mentioning this immediately brought back a lot of sad emotions for me.  I explained how that was in my past, over 3 years ago and I have gotten way past that in my life.  I again explained I was just sick and how it was very disheartening that he would (1. know about my past personal information and 2. bring it up to me in this manner).  He admitted he didn't know much about these problems after he realized I was upset.  Our meeting ended pretty soon after that and it hasn't been brought up again.  I haven't felt the same since and now I have a constant feeling of hurt when I'm around him.  I just feel like he's judging me based off of something that has had no part of my life since it happened.  It doesn't make me feel that good either, it's like I'm constantly and will forever be looked at like there's a problem with that in my life.

 

I later talked to the other manager about this and asked if he talked to my boss about it.  He said that my boss came to him asking about me in the context of what happened in the past and if this could be something like that going on again.  The other manager said he was unaware of this even happening to me until my boss mentioned it to him.  I asked if he knew how my boss found out; he wasn't sure.  Again, this became another burden, now knowing someone else knew about something that should have been kept quiet.

 **End of Notes

 I've since brought this up to my HR department here.  They informed me that what he did was wrong and it should've never happened.  I also found out how my new boss found out this information.  HR talked to everyone involved and said there would be disciplinary action.  I believe they all received a warning.  This situation has left a scar and I'd like to understand what someone outside my organization thinks about this.  Please respond with any answers you may have.  Thank you.