I visited a healthcare system and they automatically enrolled my EPIC medical health records to "Care Everywhere" without my informed consent. They didnt give me any notice of privacy practices NPP.

They shared all of my medical records with another health system without my consent.

I did not want my medical records transferred to another health system unless I was given informed consent. I was not given the opt out option. I just learned about this from the hospital privacy office.

What do I do now? Can I have my medical records redacted? Can they tell me what medical records they received and what is on file and who requested my files?

Example, was it only the Dermatology department or the entire medical file with all specialty areas.

Care Everywhere auto enrollment without giving the patient NPP violates HIPAA, correct?