HIPAA only covers healthcare providers. That means that the TSA would be held blameless in the revelation of sensitive medical information, and the only person punishable in this situation would be Dr. Boatner!

The TSA has made a regular practice of revealing private medical details of travelers, often in an extremely loud voice by shouting about these across a crowded checkpoint. I found out about a colleague of mines' pacemaker that way. He didn't want me to know about it. After the TSA had its way with him, everyone in a 300 foot radius knew.